ITIL frameworks to ITD Company for improving capabilities in service management

Reading time: 4 minute
...

📝 Original Info

  • Title: ITIL frameworks to ITD Company for improving capabilities in service management
  • ArXiv ID: 1112.4017
  • Date: 2011-12-20
  • Authors: Phuc V. Nguyen (Ho Chi Minh Citys Vietnamese Communist Party Committee)

📝 Abstract

IT operates in dynamic environments with the need always to change and adapt. There is a need to improve performance. Many gaps were found when we conduct the IT audit and we tried to seek to close gaps in capabilities. One way to the close these gaps is the adoption of good practices in wide industry use. There are several sources for good practices including public frameworks and standards such as ITIL, COBIT, CMMI, eSCM-SP, PRINCE2, ISO 9000, ISO/IEC 20000 and ISO/IEC 27001, etc. The paper propose ITIL frameworks to ITD Company for improving capabilities in service management.

💡 Deep Analysis

📄 Full Content

Each solution has specific advantages and disadvantages. For the first and second solution, it requires more IT resource. Unfortunately, the company's business is focusing to trading, not software development. Moreover, the project team just support the company in a certain duration, not belong to the company. Thus, the two solutions are not suitable in this context. For the next solution, it requires a comprehensive change and huge investment, SAP ERP for instance. But they do not want to have a comprehensive change at one moment due to too many risks in change management and too much investment. Fortunately, the forth solution which can maximize usage of the existing systems and save cost have been chosen because it is aligned with the company situation. Therefore, they want to have a solution which can utilize the existing systems but it still enhance the current business.

In this portion, we will highlight some practices that will be proposed for ITIL implementation

All system and resources should be controlled by an owner. This enables company to easy manage the system or resources effectively. So all change or resources modification must be approved before executing. In order to prevent data disclosure without control, the domain admin should be removed out of shared folder because IT staff can use it to read data.

Here is the access permission table on the file server for each shared folder that need to implement Other implement controls besides access permission above -Domain Admin ID must be removed “Fully control” permission on shared folder, except “Backup Operators. This ID is used for backup activities -Modify Domain policy to prevent “Backup Operators” log on to file server locally. This will prevent IT staff uses Backup operator to read information on file server.

-The password of backup operator ID should be kept by independent person, in that case HR manager or GD recommends keeping it.

-The password of domain admin ID also split into two parts and kept by two persons, it’s only used if the change is approved and two persons will enter password separetely for IT staf further implement

All data that are being stored in the servers must be stored for backup. This prevents any data lost then may affect to business activities. The data is stored in the backup must be protected in high security and placed in safe box.

New backup driver and tapes should be purchased. The driver will be connected directly to files server. In the short term, while waiting for backup driver is purchased, IT should implement backup task by coping all data into another hard disk. To ensure all data at least stored separate two hard disk to prevent data lost due to hardware failed.

All changes of master files and user permission access must be controlled by managers. In order to do that EFFECT system could be tracked all events and allows to printed out only by controller. The audit trail report is used to control the changes above.

By using SQL scripts, we will add it into each master database that need to be controlled.

The above writing has presented approaches as well as aspects in project management such as technique requirement, objectives, scopes, WBS, schedule, workload and budget estimation, etc… The writing also mentioned to new solution for processes and direction of project development including short term, long term perspective.

In terms of short term, the company need to solve critical issues such as customer relationship enhancement and security. For those issues which need to be solved urgently, it requires our team conducting solutions. We have discussed various solutions like -Develop a complete system

-Choose an open source and customize it -Buy an available solution and apply it to the whole company’s business -Use a part of an available solution and integrate with existing systems

Reference

This content is AI-processed based on open access ArXiv data.

Start searching

Enter keywords to search articles

↑↓
ESC
⌘K Shortcut