The main objective of this thesis is to meet Governance as a new approach in company organization, especially in IT sector. The idea is about harmonization of IT and business strategy, that should ensure achieving company goals and missions, and lead company in the right direction of advancement, what is directly connected with implementation of relevant measures of IT processes. As chapter "Governance", is describing how this approach should by ensure in whole organization on a different levels. We can translate Governance as implementation of certain best practices and procedures that lead company to process standardization and formalization. The most exercising methodologies and guidelines in IT sphere as ITIL, Val IT, CobiT, ISO 27000 are reviewed in thesis. By these methodologies organizations should be able to better optimize processes and accomplish regulation frame in particular industry. Another very important contribution of process standardization is by providing better possibilities for measurement and assessment, that is reviewed in chapter "Evaluation of IT processes performance". There is also transparent guideline which provides a simple steps procedure how to implement IT Governance in organization using CobiT and Vat IT. As this branch is relatively "young", especially in Czech Republic, management is still familiarizing with it. Last chapter is dedicated to analyze approach to ITG in Czech Republic banking sector.

Submitted by Irene Nascimento (irene.kessia@ufpe.br) on 2015-03-11T17:13:19Z No. of bitstreams: 2 DISSERTAÇÃO Edson de Albuquerque Matos Neto.pdf: 2888740 bytes, checksum: 7c82c6aee619708842c926eeabc22775 (MD5) license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) / Made available in DSpace on 2015-03-11T17:13:19Z (GMT). No. of bitstreams: 2 DISSERTAÇÃO Edson de Albuquerque Matos Neto.pdf: 2888740 bytes, checksum: 7c82c6aee619708842c926eeabc22775 (MD5) license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) Previous issue date: 2013-12-26 / O objetivo deste trabalho foi analisar uma organização através de entrevistas, com a finalidade de obter a percepção do alinhamento entre as áreas de negócio e da TI (Tecnologia da Informação), sob a ótica dos principais frameworks de gestão e governança da TI sendo eles, o BSC (Balanced Scorecard) e COBIT (Control Objectives for Information and related Technology). Inicialmente, foram explanados os conceitos básicos referentes a estratégia e aos modelos de alinhamento de negócios e de TI, como também o uso da metodologia de pesquisa, tendo como foco uma empresa de grande porte do setor de varejo localizada no nordeste do Brasil, representadas pelos gestores das áreas de negócios e TI. Com base na coleta das informações, os resultados foram analisados de forma sistemática e comparativa o que possibilitou a conclusão sob duas percepções. A primeira, atribuída por pontuação em escala de 1 a 5, evidenciou equilíbrio no alinhamento entre as áreas de negócio e TI. Na segunda análise, o critério adotado de pontuação foi do mais importante para o menos importante, onde concluiu-se haver divergência sob o entendimento da importância estratégica financeira na organização, verificado assim, a necessidade de maior aderência da TI com o negócio.

The diploma thesis reacts on the interest of the Czech foreign ministry IT department to get an overview of ITIL 2 and COBIT 4.1 world-wide acknowledged IS/IT management best practice libraries. Both libraries are put in the framework of IT Governance theory and practice. COBIT is presented as world ITG standard, meaning the alignment of organization's strategic goals and IT goals. It is focused on organizations, where the shift of IT perception towards a strategic partnership with the business is driven by top-down board initiative. On the other hand, the ITIL core texts Service Support and Service Delivery are treated as a standard of IT service management, suitable as a framework to establish processes within the foreign ministry's IT department. Three alternative implementations of the two libraries are shown, in a situation of non-existent process management and information architecture. Moreover, the IT Governance initiative has a bottom-up character. The first variant connects ITIL and COBIT process models to the goals and projects outlaid in the 2008-2010 IT Strategy draft (IT BSC was used in the strategy to set up goals). The COBIT processes are aligned to the IT BSC domains and projects; further on, more detailed ITIL tools are assigned to the COBIT processes using the toolbox [IT GOVERNANCE INSTITUTE; OFFICE OF GOVERNMENT COMMERCE. Aligning COBIT, ITIL and ISO 17799 for Business Benefit]. As the projects formulated in the IT Strategy don't focus on the fundaments of process management, a stepwise approach to document the current processes using the ITIL: Service Support and Service Delivery framework is suggested. The second variant came into reality in mid 2008: COBIT has been used without success to estimate users' preferences. The reasons of the failure are discussed. Czech translation of COBIT 4.1 maturity models by the author intended to use as one of the tools in the opinion poll is attached as Annex 2. The last variant is not directly aligned to the problems of foreign ministry's IT/IS, but it is the most pragmatic guide to the implementation of the libraries. As an external help desk has been already launched, I suggest the establishment of ITIL Incident Management and Problem Management processes, supported with a CMDB configuration database.

Práce shrnuje problematiku auditu informačního systému a tyto poznatky následně využívá při provedení auditu informačního systému v reálné společnosti. Audit je prováděn pomocí metodiky COBIT a respektuje nejen požadavky metodiky kladené na audit ale i speciální požadavky, které stanovila organizace. Práce zároveň ověřuje použitelnost metodiky COBIT při provádění auditu v podmínkách středně velké české společnosti.

No description available.

Made available in DSpace on 2014-06-12T15:57:34Z (GMT). No. of bitstreams: 2 arquivo3209_1.pdf: 2057622 bytes, checksum: 3bd1fb1db0db47e032b586b53e77a594 (MD5) license.txt: 1748 bytes, checksum: 8a4605be74aa9ea9d79846c1fba20a33 (MD5) Previous issue date: 2010 / A Governança de Tecnologia da Informação (TI) surge como uma derivação da Governança Corporativa e tem por objetivo estabelecer um conjunto de processos e controles que direcione as ações da área de tecnologia às estratégias de negócios. Apesar da adoção crescente da Governança de TI nas empresas, muitas iniciativas de implantação fracassam pela falta de envolvimento dos gestores no processo ou por estratégias de implantação distantes da necessidade e realidade das organizações. Utilizando a Empresa Brasileira de Correios e Telégrafos (ECT) como ambiente de estudo, uma pesquisa foi realizada junto aos gestores da área de tecnologia com o objetivo de identificar pontos críticos de sucesso para a governança de TI adotada pela organização. Com base nessa pesquisa e no diagnóstico sobre o ambiente estudado, um conjunto de diretrizes é apresentado como proposta para alcançar uma governança de TI corporativa e eficaz, ou seja, que possa ser percebida e praticada em cada núcleo de tecnologia da empresa

Securing user devices and servers requires a complex approach which includes not only the configuration of the device itself but also many other factors. The goal of this thesis is to present principles of a new guideline aimed at security and management of user devices and servers in the context of information security. The first part of this paper is devoted to the analysis of existing industry standards, frameworks, guidelines, and other collections of best practice commonly used in the management of informatics and information and IT security. The analysis is complemented with a field research conducted among forefront specialists. Based on the analysis and research, a new methodic concept for the management and control of user devices and servers security called DEVSEC is described in the next part. The concept is constructed with emphasis on security requirements, security measures, processes, resources and the overall security assurance process. The last part of the paper provides results of the final research aimed at testing the concept in the envitonment of one financial firm and also results of another field research among security specialists. The DEVSEC contributes to the theory of management of informatics as well as to its practice. The concept represents a complex approach to the management and control of security of servers and user devices as well as a new guideline ready for practical utilization.

The diploma thesis deals with the implementation of multiproject management in terms of international business organization and its IT department. The aim of this thesis is to describe the current state of project management in the IT department using methodology for measuring the maturity of processes. Define the management requirements for project portfolio tool, establish criteria for the selection and also tools comparison. After choosing the tool which satisfies all the requirements and criteria, proposal for implementation of this tool will follow. The conclusion is devoted to a summary of the results and proposals for change, to encourage improvement in the level of maturity of the project management process and project portfolio.

El propósito de este trabajo es proponer una metodología para la implantación de un sistema de información basándose en los lineamientos de METRICA (metodología de planificación, desarrollo y mantenimiento de sistemas de información) y en COBIT (Objetivos de Control para la información y Tecnologías relacionadas) el cual es un conjunto de mejores prácticas para el manejo de información. Sintetizando ambos conjuntos de conocimientos orientados a procesos nos enfocaremos específicamente en la implantación de las soluciones informáticas. / Tesis

Darbo tyrimo sritis yra informacinių technologijų vertinimo metodologijos ir jų praktinis taikymas, detaliau nagrinėjamos COBIT (angl. Control Objectives for Information and related Technology) ir CMM (angl. Capability Maturity Model). Tyrimo objektas - vertinimo proceso kompiuterizavimas, problema - informacinių technologijų atitikimo įmonių veiklos poreikiams nustatymas. Tikslas yra suteikti galimybes įvertinti įmonių informacinių technologijų atitikimą jų veiklos poreikiams, sukuriant kompiuterizuotą vertinimo sistemą. / The problem of identifying the adequacy beside information systems and business needs exists in enterprises. This research work analyzes a few evaluation methodologies and proposes supporting software tool developed for this purpose on the base of integration of two methodologies - Control Objectives for Information and related Technology (COBIT) and Capability Maturity Model (CMM). The developed software tool allows to approach to the main purpose of this research work – to provide the opportunity to evaluate the adequacy beside information systems and business needs.