信息技术 IT资产管理 第10部分：ITAM实施指南

[中文适用范围]： 本文件涵盖以下信息技术资产管理系统（ITAM）的流程： a）用于整体IT资产管理系统的管理流程（未在ISO/IEC 19770-1中详细描述），本文件为此提供全面覆盖和一致解释；这些流程包括： — 理解外部环境和利益相关方需求（7.1、7.2和10.2）； — 领导力、方针和组织（10.3）； — 建立和维护管理体系（10.4）； — 规划与风险管理（10.5）； — 支持（包括资源、能力、意识和沟通——10.6）； — 执行功能性及生命周期流程（10.7）； — 绩效评估与改进（10.8）； b）IT资产的功能性管理流程（未在ISO/IEC 19770-1中详细描述），这些流程贯穿于IT资产的生命周期流程之中，与大多数IT管理系统标准共享，尽管有时分组方式略有不同；这些流程包括： — 变更管理（11.2；ISO/IEC 19770-1也要求）； — 数据管理； — 许可证管理； — 安全管理； — 关系与合同管理； — 财务管理； — 服务级别管理； — 其他风险管理； c）IT资产的生命周期管理流程，如ISO/IEC 19770-1中所规定的，这些流程根据不同方法略有不同的分组和命名方式；这些流程包括： — 规范； — 开发； — 获得； — 发布； — 部署； — 运行； — 退役。 本文件适用于所有ITAM实施。 本文件适用于所有类型的IT资产，并适用于所有类型和规模的组织。 [外文原描述]： This document covers the following information technology asset management (ITAM) system processes: a) management system processes for the overall system of IT asset management (not described in ISO/IEC 19770-1 in detail), which are specified in this document for comprehensive coverage and consistency of explanations; these include: — understanding the external context and shareholder needs (7.1, 7.2 and 10.2); — leadership, policy and organization (10.3); — establishing and maintaining the management system (10.4); — planning and risk management (10.5); — support (including resources, competence, awareness, and communication – 10.6); — executing functional and life cycle processes (10.7); — performance evaluation and improvement (10.8); b) functional management processes for IT assets (not described in ISO/IEC 19770-1 in detail), which are cross-cutting processes that integrate with life-cycle processes for IT assets and which are shared with most IT management system standards, though sometimes slightly differently grouped; these include: — change management (11.2; also required by ISO/IEC 19770-1); — data management; — license management; — security management; — relationship and contract management; — financial management; — service level management; — other risk management; c) life cycle management processes for IT assets as specified in ISO/IEC 19770-1, which are grouped and named slightly differently by different methodologies; these include: — specification; — development; — acquisition; — release; — deployment; — operation; — retirement. This document is applicable to all ITAM implementations. This document can be applied to all types of IT assets and by all types and sizes of organizations.