cobit5中文以及英文版框架、指南

⭞⍷ぁ

Personal Copy of: Jiang Lin

2

φ⭞⍷ぁ

ISACA

®

ള䱻ؗᚥ㌱㔕ᇗ䇗অՐ

ള䱻ؗᚥ㌱㔕ᇗ䇗অՐδISACA

®

θ㖇൶φwww.isaca.orgᱥޞ⨹ޢ䇚ᨆבؗᚥ㌱㔕δISε䢪䇷ᆿޞȽԷѐ IT

䙖жѠؗ䎌䶖θՎٲⲺؗᚥ㌱㔕Ⱦᆹ䘎䙐䗽ޞ⨹㪍Ⲻ⌞߂ؗᚥ㌱㔕ᇗ䇗ᐾδCertified Information Systems

Auditor

®

εȽ⌞߂ؗᚥᆿޞ㔅⨼δCertified Information Security Manager

®

, CISM

®

εȽԷѐؗᚥ〇ᢶ⋱⨼

䇚䇷δCertified in the Governance of Enterprise IT

®

, CGEIT

®

ε伄䲟ؗᚥ㌱㔕ⴇ᧝䇚䇷δCertified in Risk and

Information Systems Control™, CRISC™εᶛᨆૂ䇷᱄ؗᚥᢶᵥᢶ㜳ф⸛䇼ȾISACA ൞ COBIT

®

ISACA

. The ISACA

®

China/Hong Kong Chapter assumes

sole responsibility for the accuracy and faithfulness of the translation.

ɅCOBIT

®

5φ⭞⍷ぁɆδᵢ㪍֒ε㔅ള䱻ؗᚥ㌱㔕ᇗ䇗অՐδISACA

®

ε䇮θISACA

®

ѣള俏⑥࠼Րṯᦤ

ެ㤧ᮽ⡾㘱䈇ᡆㆶ։ѣᮽθISACA

®

for governance of enterprise IT (GEIT), assurance, risk and security professionals. ISACA makes no claim that use of

any of the Work will assure a successful outcome. The Work should not be considered inclusive of all proper information,

procedures and tests or exclusive of other information, procedures and tests that are reasonably directed to obtaining

the same results. In determining the propriety of any specific information, procedure or test, readers should apply their

own professional judgement to the specific GEIT, assurance, risk and security circumstances presented by the particular

systems or information technology environment.

ള䱻ؗᚥ㌱㔕ᇗ䇗অՐδISACA

®

䓡Ⲻщѐ࡚ᯣᶛߩᇐ䟽⭞䘸ᖉⲺؗᚥȽ⍷ぁᡌ⎁䈋Ⱦ

ISACA

3701 Algonquin Road, Suite 1010

Rolling Meadows, IL 60008 USA

⭫䈓φ +1.847.253.1545

Ֆⵕφ +1.847.253.1443

৸ֵࣖ⭞ ISACA ⸛䇼ᙱ≽φ www.isaca.org/knowledge-center

5φ⭞⍷ぁɆ

ISBN 978-1-60420-279-3

㗄࡟ඐՍളদ࡭

Personal Copy of: Jiang Lin

3

呙䉘

John W. Lainhart, IV, CISA, CISM, CGEIT, IBM Global Business Services, USA, Co-chair

Derek J. Oliver, Ph.D., DBA, CISA, CISM, CRISC, CITP, FBCS, FISM, MInstISP,

Ravenswood Consultants Ltd., UK, Co-chair

Robert D. Johnson, CISA, CISM, CGEIT, CRISC, CISSP, Bank of America, USA

Erik H.J.M. Pols, CISA, CISM, Shell International-ITCI, The Netherlands

Vernon Richard Poole, CISM, CGEIT, Sapphire, UK

Abdul Rafeq, CISA, CGEIT, CIA, FCA, A. Rafeq and Associates, India

Floris Ampe, CISA, CGEIT, CIA, ISO 27000, PwC, Belgium

Gert du Preez, CGEIT, PwC, Canada

Stefanie Grijp, PwC, Belgium

Gary Hardy, CGEIT, IT Winners, South Africa

Bart Peeters, PwC, Belgium

Don Caniglia, CISA, CISM, CGEIT, FLMI, USA

Mark Chaplin, UK

Roger Debreceny, Ph.D., CGEIT, FCPA, University of Hawaii at Manoa, USA

Mike Donahue, CISA, CISM, CGEIT, CFE, CGFM, CICA, Towson University, USA

Urs Fischer, CISA, CRISC, CPA (Swiss), Fischer IT GRC Consulting & Training, Switzerland

Bob Frelinger, CISA, CGEIT, Oracle Corporation, USA

James Golden, CISM, CGEIT, CRISC, CISSP, IBM, USA

Meenu Gupta, CISA, CISM, CBP, CIPP, CISSP, Mittal Technologies, USA

Gary Langham, CISA, CISM, CGEIT, CISSP, CPFA, Australia

Nicole Lanza, CGEIT, IBM, USA

Michael Semrau, RWE Germany, Germany

Max Shanahan, CISA, CGEIT, FCPA, Max Shanahan & Associates, Australia

Alan Simmonds, TOGAF9, TCSA, PreterLex, UK

Cathie Skoog, CISM, CGEIT, CRISC, IBM, USA

Dejan Slokar, CISA, CGEIT, CISSP, Deloitte & Touche LLP, Canada

Roger Southgate, CISA, CISM, UK

Nicky Tiesenga, CISA, CISM, CGEIT, CRISC, IBM, USA

Wim Van Grembergen, Ph.D., University of Antwerp Management School, Belgium

Greet Volders, CGEIT, Voquals N.V., Belgium

Christopher Wilken, CISA, CGEIT, PwC, USA

Personal Copy of: Jiang Lin

4

φ⭞⍷ぁ

Roland Bah, CISA, MTN Cameroon, Cameroon

Dave Barnett, CISSP, CSSLP, USA

Max Blecher, CGEIT, Virtual Alliance, South Africa

Ricardo Bria, CISA, CGEIT, CRISC, Meycor GRC, Argentina

Dirk Bruyndonckx, CISA, CISM, CGEIT, CRISC, MCA, KPMG Advisory, Belgium

Donna Cardall, UK

Debra Chiplin, Investors Group, Canada

Sara Cosentino, CA, Great-West Life, Canada

Kamal N. Dave, CISA, CISM, CGEIT, Hewlett Packard, USA

Philip de Picker, CISA, MCA, National Bank of Belgium, Belgium

Personal Copy of: Jiang Lin

5

呙䉘

Personal Copy of: Jiang Lin