COBIT行业应用系列 银行业IT治理最佳实践ၿྛြ ITᇍ৘ቋࡄൌ࡬ֻi်银行业 IT 治理最佳实践ၿྛြ ITᇍ৘ቋࡄൌ࡬ֻii်ܱႿ ISACA ISACA® ൞ཚუಆ౯֥ྐ༏νಆህြܒࠏđᄝః࣍ 50୍৥ൎᇏđᇁ৯ႿϺᇹህြದჴބఒြൌགྷ࠯ ඌ֥ቋնమ৯bࣂ֒ൗࢸູ࠯ඌ෮౺׮đ ISACAູಆ౯ህြದჴิ܂ᆩ്aᆯြಪᆣѩյᄯഠಕຩ઎đ ᇹ৯ఃᆯြࢨࣉđ๷׮෰ૌ෮ᄝܒࠏ֥ሇ྘đ๙࠯ݖඌൌགྷԷྍb ISACAಆ౯ഠ౵ᇏႵ 50؟ຣ଀Ֆ ൙ྐ༏აຩ઎νಆaᇍ৘aബ࠹ა࡫ᆣaڄགაԷྍ۽ቔ֥ದჴb ISACAఋ༯֥ CMMIᄵህᇿႿఒ ြି৯Ӯඃ֥؇௟ܙაࣉڿb ISACAᄝಆ౯ 188ֹބࡅݓ۱౵ഡႵ 215߶ٳ۱đѩᄝૅބݓᇏݓष ഡϷ܄൩b ૧ᄳലૼ ISACA ഡ࠹ѩщᇅਔ ITᇍ৘ቋࡄൌ࡬č༯ӫoቔ௖pĎđᇶေႨቔህြದჴ֥࿐༝ሧਘb ISACA ໭ مЌᆣ൐ႨЧቔ௖ࣼ၂קିܔൌགྷӮݔࢲ֥ۿb Чቔ௖҂ႋФ൪ູЇݣ෮ႵൡႨ֥ྐ༏a ӱ྽ބҩ൫đ ҂ஆԢᄝః෱ྐ༏aӱ྽ބҩ൫ކ֥৘ᆷ֝༯֤ࠆ๝ဢ֥ݔࢲॖିbᄝಒק಩ޅऎุྐ༏aӱ྽ࠇҩ൫֥ൡၒྟൈđህြದჴႋࣼऎุ֥౦ঃčห֥ק༢๤ࠇྐ༏࠯ඌ࣢ߌĎቓԛሱ࠭ህြྟ֥஑؎b Ќ਽ಃ০ © 2019 ISACA. Ќ਽෮Ⴕಃ০bໃࣜ ISACA ൙༵඀૫൱ಃđЧ඀ᇏ֥಩ޅ҆ٳन҂֤ᄝ࡟෬༢๤ᇏ ൐Ⴈaگᇅaᄜϱaྩڿaؿٳaཁൕބԥթđࠇ๙ݖ಩ޅ๯ࣥၛ಩ޅྙൔč׈ሰaࠏྀa႕ႆa੣ᇅࠇః෰ĎԮѬbگᇅބ൐ႨЧ඀֥ಆ҆ࠇ҆ٳଽಸࣇᄍྸቔູ࿐ඌaଽ҆٤ބഅြႨ๯ࠇႨႿሦ࿘ /ܤ໙಩ༀđѩ౏сྶЇওҋਘটჷ֥ປᆜඋྟbࣼЧቔ௖ط࿽ીႵ൱Ⴭః෰ಃ০ࠇྸॖb ISACA 1700 E. Golf Road, Suite 400, Schaumburg, Illinois 60173, USA߅׈+ : 1.847.253.1545 Ԯᆇ : +1.847.253.1443 ຩᅟğwww.isaca.org ISACAᇏݓ КࣘӔဝ౵ת೘ߌᇏਫ਼ 20ݼুӮᇏྏ Bቖ5Ҫ505൩ ׈ሰႯདğ[email protected] ISACAᇏݓັྐ܄ᇙݼ ၿྛြ ITᇍ৘ቋࡄൌ࡬ֻiii်෰೶ᆭെॖၛ۾ზ ii ࡼᇏ֥ݓൌࣜ࡬ဒ๷ܼ֞ಆ౯ြࢸ ࣂ֒ ITᇍ৘ህြದൖсྶ૫֥ؓज़ี൞đೂޅಞሱ࠭෮ᄝఒြ০Ⴈ࠯ඌ๷׮ြༀіགྷ֥ൌᇉ ڿ೿b ໭ંଧ۱ྛြֹࠇ౵đ࠯ඌࣉ҄ᄝ๷׮ြༀэ֥۪๝ൈđෛᆭطট֥сࡼ൞భ෮ໃႵ֥็ᅞb ֥ࣂ֒ఒြ׻ᄝࣉྛඔሳ߄ሇ྘ၛൌགྷིੱބԷྍശࠩđᆚ౼ູ০ၭཌྷܱٚԷᄯࡎُ٤ᆴbෛሢఒ ြሇཟྍ࠯ඌđೂದ۽ᇆିa౵ॶ৽aᄉ௜෻ၛࠣໃট୍ࠫࡼႤགྷ֥ః෰࠯ඌđؿགྷѩҐႨॖौ֥ᇍ৘ൌ࡬ཁ֤ರၭᇗေb ISACAބᇏࡹݓഡၿྛླྀቔؿ֥҃u ITᇍ৘ቋࡄൌ࡬vϢ௃඀ิ܂ਔབྷൌ ֥ᆇᆩሣ࡮đႵᇹႿ۲ᇕܒࠏ০Ⴈݖࣜဒᆣa܄࠽ݓಪ֥ॿࡏ఼߄ఃྐ༏࠯ބඌ֥ᇍ৘bಌഒᆃဢ֥ᇍ৘פҪഡ࠹đఒြቆᆮޓ଴ႋؓ็ᅞđ۷᝔ંೂࡹޅ৫ႋؓ ITڄག֥ٝཌaႵི߸֥Бࠏᇅđ ၛࠣೂޅิശఒြଽ҆࡯ܱ০ၭཌྷڄ֥ܱٚགၩ്b ࣂ฿࠯֥ඌҪԛ҂౫đ ISACA҂ࣇӻ࿃Ⴊ߄ COBITॿࡏູြᆀࠣఒြջটऍնࡎᆴđѩ౏ູਅ ݺఒြᇍ৘֤֞ᇗ൪ࡔק׍ൌࠎԤbԢਔᆦӪఒြಆ໊ٚൌീa౺׮ြༀሇ྘ၛຓđ COBITॿߎࡏ ॖၛູऎุଢѓބཛଢ֩ӆࢳࣟथ໙ีđ ᄍྸఒြਈุҊ၉đ ט஥ᇍ৘ٚσડቀሱ׿࠭၂໭֥ؽླ౰bCOBITଽಸაൈ༯֥ཌྷܱѓሙaᆷଲaބܿمቋࡄൌ࡬नཌྷܱ৳đၹՎӮູᇶ֝ఒြᇍ৘֥׮ࠃॿࡏb ᇏࡹݓഡၿྛ؟୍ট၂ᆰ൞ COBIT఼Ⴕ৯֥ᆦӻᆀބӮ֥ۿൌ࡬ᆀđطu ITᇍ৘ቋࡄൌ࡬vϢ ௃඀ࢺക֥൞ఃᄝᇍ৘ൌ࡬ᇏ֥ྍࣜဒb੬ࠆ൹಴֥ᇏࡹݓഡၿྛނྏြༀ༢๤oྍ၂սpᆞ൞ࠎႿCOBITطյᄯbྍ၂ս༢๤ᄝٚ؟૫नൗࢸਵ༵đ༢๤ॖႨྟۚđ҆ඇ۲֥ᇕྍ྘۽ऎۿބି؟ ղ13000؟ᇕđ༢๤൭؊ࠏႨ޼ӑݖ 2.7ၡದb Чቋࡄൌ࡬Ϣ௃඀Ⴎ ISACAaᇏࡹݓഡၿྛބଲࣘബ࠹ն࿐ቆӮ֥ᆽ჻ᆀ๶܋ؒ๝ປӮđ္൞ ISACA๷ԛࠎ֥Ⴟᇏݓൌ֥࡬൮ٺ ITᇍ৘ቋࡄൌٚ࡬૫֥Бۡb۲ᇕྍ࠯ඌᄝൗࢸӑն྘࠶ุࣜᇏ ݓ௴ࠣ࿡૒đ໡ૌ௧్௹րໃটႵ؟۷ᇏݓՖြᆀaቆᆮބྛြൌࣜ࡬ဒࢺക۳ಆ౯ြࢸb ቔູ࠽ݓྟቆᆮđ ISACAಆ౯ᆣ඀ӻႵದӑݖ 16.5ຣđКࣘϷ܄൩Ⴟࣂ୍୍ԚᆞൔӮ৫đᅤཁ ISACAᇁ৯ٳཚಆ౯༵ࣉᆩ്ࣜބဒaᆦӻᇏݓህြದൖ֥ܒࠏࠣ৯؇bu ITᇍ৘ቋࡄൌ࡬vϢ௃ ඀ٳཚࡎ֥ۚᆴᆩ്ሧჷđϺᇹ໡ૌࡆധؓᇍ৘ނྏჰᄵ֥৘ࢳđᇹ৯ᇏݓମᇀൗܒࠏ۲ࢸᄝ࠯ඌሇ྘ࣉ֥ӱᇏ൤٢ቋնమିb Rob Clyde ISACAಆ౯׬൙߶ᇶ༜ ၿྛြ ITᇍ৘ቋࡄൌ࡬ֻiv်Ч်ູॢϢ်ၿྛြ ITᇍ৘ቋࡄൌ࡬ֻv်ᆩ്ٳཚაᇏݓᇆ߰ ITᇍ৘൞၂۱঒ಠಆ౯۲োቆᆮ֥ܒࠏಣ૊߅ีᆭ၂đݓଽຓཌྷ֥ܱ৘ં࿹؟ޓ࣮đఃᇏၛ ISACAč࠽ݓྐ༏༢๤ബ࠹ླྀ߶Ď๷ԛ֥ COBITčྐ༏ࠣཌྷ࠯ܱඌ֥॥ᇅଢѓĎॿࡏѓሙቋູಃຯb ھѓሙุ༢ၘᄝൗࢸ၂Ϥ֥ࡅݓ۱؟ᇗေቆᆮაఒြᇏᄎႨđ๙ࡹݖ৫ޘॴᆜ۱ቆᆮ֥ ITᇍ৘aܵ ৘ބᄎႏ֥ြༀॿࡏđᆷ֝ᆃུቆᆮႵི০Ⴈྐ༏ሧჷđܵ৘აྐ༏ཌྷڄ֥ܱགđ๙ݖົӻൌགྷ൬ၭa Ⴊڄ߄གܵ৘ࠣሧჷ০Ⴈᆭ֥ࡗ௜ޙđՖطԷᄯ IT ֥ቋႪࡎᆴb ᇏࡹݓഡၿྛ֥ྐ༏߄ඣ௜ᄝಆݓମᇀಆ౯ၿྛြࢸनंႿਵֹ໊༵đఃࠎႿ COBIT༢ਙѓሙ ֥ྍ၂սoނྏ༢๤ࡹഡ۽ӱp۷൞಴ࠆ 2017୍؇ၿྛ॓ؿ࠯ᅚཛଢหࢂ֩bྍ၂ս༢๤࠽ݓࡼ༵ ֥ࣉѓሙაᇏݓၿྛြ֥ห൹ྟປૅކࢲđቆᆮྐ༏॓ܵ࠯৘ಆੀӱࡹଆđڄࡹܒགٝ॥ุ༢đປ೿॓࠯ᇍ৘ุ༢đܵࡓ֤ࠆಪॖބြࢸड़קđӮູᇏࣁݓವ॓࠯Էྍׅ֥ٓᆭቔb Ч໓Ֆ ITቆᆮaᇅ؇aြༀॿࡏa ITܒࡏa॓࠯ଽ॥໴ٚ۱૫ࡹؓഡၿྛ֥ྍ၂ս༢๤ࣉྛਔ བྷൌ֥ӂඍđ ໓ᇏЇݣਔնਈၞႿҠቔ۽֥ऎمٚބđ ҂ؓࣇ ITᇍ৘ᄝၿྛြઋֹิ܂ਔ్ൌ֥ᆷ֝đ ؓః෰ྛြ֥ ITᇍ৘ൌ࡬္Ⴕޓ఼࡫ࢹ֥ၩၬbЧ໓ջট֥၂۷۱ູധჹ֥ၩၬ൞đᇏݓᄝҐႨݓ ࠽༵ࣉѓሙݖ֥ӱᇏԷᄯྟڮֹჍఃྍ֥ଽಸمٚބđطࣉཟ࠽ݓြࢸൻԛԷྍ֥ቋࡄൌ࡬đູൗࢸ॓ؿ֥࠯ᅚ܊ངᇏݓᇆ߰bՖᆃ၂ׄഈඪđᇏࡹݓഡၿྛၘࣜሼᄝਔᆩ്ٳཚ֥భਙb ӧᇒ࢝൱ Кࣘն࿐ࣁವྐ༏߄࿹࣮ᇏྏᇶ಩ ᇏݓೈࡱྛြླྀڬ߶৘൙Ӊ ᇏܱըᇆ৳ೈڛࡱༀြᇉਈԷྍ৳ૐ߶Ӊၿྛြ ITᇍ৘ቋࡄൌ࡬ֻvi်Ч်ູॢϢ်ၿྛြ ITᇍ৘ቋࡄൌ࡬ֻvii်ଢ ੣ ๭іଢ੣ ........................................................................................................................................... ix ֻ1ᅣ ITᇍ৘ ................................................................................................................................. 1 1.1 ᇍ৘৘ં ..................................................................................................................................... 1 1.2 ᇍ৘ൌ࡬..................................................................................................................................... 4 ֻ2ᅣ ITቆᆮ ................................................................................................................................. 4 2.1 थҦุ༢ .................................................................................................................................... 5 2.2 ᆳྛุ༢ ..................................................................................................................................... 6 2.3 ህြ๶ؒ..................................................................................................................................... 9 2.4 ದჴၩ് .................................................................................................................