Gobierno TI aplicando estándares y un marco de control en el uso de COBIT 5 – ISO/IEC 38500

The purpose of the titling work was to prepare a proposal for the implementation of a Government of Information Technologies in the ESPAM-MFL itself, which allows the efficient use of and control of human and technological resources. For its development, the COBIT 5 methodology and the ISO / IEC 385...

Popoln opis

Shranjeno v:
Bibliografske podrobnosti
Glavni avtor: Andrade Vinces, Tania Mariela (author)
Format: masterThesis
Jezik:spa
Izdano: 2019
Teme:
Online dostop:http://repositorio.espam.edu.ec/handle/42000/1034
Oznake: Označite
Brez oznak, prvi označite!
Opis
Izvleček:The purpose of the titling work was to prepare a proposal for the implementation of a Government of Information Technologies in the ESPAM-MFL itself, which allows the efficient use of and control of human and technological resources. For its development, the COBIT 5 methodology and the ISO / IEC 38500 REFERENCE MODEL were used. This began with the identification of the current processes of the institution by applying a structured interview with open questions and using principles 1 and 5 of COBIT (satisfy stakeholders and separate government from management). The comparative analysis of the IT government of the university and the aforementioned reference models continued, for which it was necessary to take the six principles used by the standard (responsibility, strategy, acquisition, performance, conformity and human behavior), together with the areas of governance (strategic alignment, value generation, risk management, resources and performance measurement) and its components (structure, processes, relationship and communication mechanisms and technologies). Finally, it was possible to obtain in the identification 19 processes to be implemented strengthened with the Internal Control Standard 410-09, and in the comparison, the current situation of the entity was obtained regarding what these two models of good practices propose, that through a plan, proposes IT governance implementation strategies that allow resources (people, infrastructure, applications and information) to be used in the best way in order to achieve sustainability in their environment.