(c) 2009 Christopher Paidhrin / cpaidhri@swmedicalcenter.

org

ISO 20000 / ISO 27001(2005) / ISF / CobiT-COSO / ITIL / MOF - Best Practices
CMMI / PMBOK / NIST / ITPI / Six Sigma ( ) - DMADDI
SSO, IAM
(IAM)
( . - - -
/ Meta Security)
/ / (PO 2)
/ PLM /

/ (VOIP) / SOA SOA

/ / /
/ (NAC) /
& / --
(AI 2) / / / / (AI 6 & 7)
(IDS/IPS) )

& -- & -- SOX-COSO / ARRA-HITECH-HIPAA / SAS 70 / GLBA / FCPA / FIPS PUB-200 ( .)

( ) (SIEM) -- DPA, IP, HAS - UK / PIPEDA - Can / BIS / 8thDirCons / Basel II

( ) - , , , -152

/ ( . , .& . .)
/ BPM /
- & :
(ME 3)
/ --
/
/
/ (AI 1)
/ / /
/ /
, , ,
(PO 1) / /
" ( . )
& ( , (PO 8)
/
, ) -
/ ( )/
/
/ (PO 5) /

(ROI)
/
, , (DoS) / / / & (ERP) (BI) / --

/ / SPAM / / (PO 6) (ME 4)

/ /
/
/ /
/

, & /
& , , / /

, / /
/
/ VPN ( .
/ , ,
& ), /
& (ACL) /
IDS / IPS, ,
XML / NAC , SSO ,
/ /
SAML / SOAP / WS-Security &
(PO 9) /
, & / /
/ /
/ ( . )
/ DNS ,
& ( . )
& proxy- , SSO, :
(PO 3) , ,
IAM ( , , ...)
& , ,
, , VOIP , ,
[BPM] (AI 4) (DS 13)

Blackberry, Bluetooth m-logistics / / /

/
& (NAPs/WAPs) (ME 2)
(BSC)
, , , , USB --

IRC, Twitter, (DRBC)

(COOP) (DS 4)
, (DS 3)
, &
(DS 6)
Web- / URL / SMTP / POP3 /
Java / JavaScript / Active
X / SAML / WS-Sec ,
(PO 4)
/ -- SSL / IPSEC VPN / FTPS
ExtraNets / / SOA /
( . )
SaaS / /
, (PO 7)
Cloud / Grid / -- /

(ME 1) /
IP / XML &
& DMZ
DMZ (DS 7)
IPS / IDS / VLANs / / &
SSO / /
( . )
Intranet /

/ / /
/
&
/ / / (AI 3 & 5)

(RBAC) / / (Help (DS 10)

/ /
(AIM) Desk) ( )

(NAC) ) (DS 8) (DS 9)

/
/ / /
/
/
DRBC ( . & )/

QA - (ISO)
- , & (DS 2)
(SLA)
/ &
/
& & / /
SLA /
)

/
/

, , ,
/
, , &
& / & ,
& (DS 1)
&

, , (RBAC / xBAC)
SSO, IAM
- &
/ RFID
,
/ , , ,
, , / SDLC &

/ &
&
/
/

/ ,
/
/ / /
&
,
,

/ /
, &
/ / /

) ) (AI ) /
/ RBAC
& &
HR
, / -- ( UTM) /

--

) (AC)
, , , /
-
& & - -
/ DLP /
/ MDM / --
)
&
/ / ( .
/
& )
/ / / ( ) , &
/ / / /

&

&
/
ITSM Best Practices are part of the ideal all IT executives and personnel strive toward. The effort is never ending. , , ,
(DS 5)
-
Collectively, ITSM Best Practices represent the framework(s) and functional integration of standards, policies, /
/
procedures, organizational structure, tools, skills, knowledge and resources that provide optimal value to an
organization: The Value Proposition. / /

From an administrative perspective, the central values are cost effectiveness, service orientation (usability and -
functionality), security, risk management, enhanced productivity and growth/profitability. -
(DS 11) & Privacy
/ E-mail, FTP, Instant Messaging
From a workforce member perspective, the central values are privacy, accessibility, and experience satisfaction.
/ / / TPM
[ DLP ]
From an IT security perspective, the central values are confidentiality, integrity, availability and trust.

CobIT Model:
- : / /
- ISO ISO / / ( . )
) ITIL 20000 27002 ) & /
& /

ITSM Best Practices _11x17_2010_1.mmap - 13.01.2010 - Christopher Paidhrin ( / )