Hier finden Sie alle Normen und Standards, der Reihe nach aufgelistet.

  • ISO 9798-1 – Entity authentication

    Beschreibung ISO/IEC 9798-1:2010 specifies an authentication model and general requirements and constraints for entity authentication mechanisms which use security techniques. These mechanisms are used to corroborate that an entity is the one that is claimed.  ISO.org Weiterführende Links Das Dokument kann hier erworben werden. Schlagwörter Information technology — Security techniques — Entity authentication Status Aktuell:…


  • ISO Guide 73 – Risk management vocabulary

    Beschreibung ISO Guide 73:2009 provides the definitions of generic terms related to risk management. It aims to encourage a mutual and consistent understanding of, and a coherent approach to, the description of activities relating to the management of risk, and the use of uniform risk management terminology in processes and frameworks dealing with the management…


  • IT-CMF – Capability Maturity Framework

    Beschreibung The IT Capability Maturity Framework is a framework specifically created to derive real, measurable business value from IT. It helps organisations devise more robust strategies, make better-informed decisions, and perform more effectively, efficiently and consistently. IVI Weiterführende Links Weitere Informationen können Sie hier finden. Schlagwörter IT Capability Maturity Framework


  • ITIL – Managing Services within the digital era

    Beschreibung ITIL 4 is an adaptable framework for managing services within the digital era. Through our best practice modules, ITIL 4 helps to optimize digital technologies to co-create value with consumers, drive business strategy, and embrace digital transformation. Axelos Ltd. Weiterführende Links Weitere Informationen können Sie hier nachlesen. Schlagwörter ITSM, Lebenzyklus von IT Services, IT…


  • Lean IT

    Beschreibung Lean IT ermöglicht es Unternehmen, den Aufwand für die nicht oder nur indirekt wertschöpfenden Geschäftsprozesse zu senken. Die frei werdenden Ressourcen können dann in die tatsächlich Mehrwert bietenden Aktivitäten umgeleitet werden. https://lean-management-beratung.at/lean-blog/effizienzgewinn-durch-lean-it Weiterführende Links Das Lean IT Prinzip wird von einigen Unternehmen angeboten. http://www.lean-it-management.de/ https://lean-management-beratung.at/lean-blog/effizienzgewinn-durch-lean-it wiki Schlagwörter Development and management of IT services


  • MoP – Management of portfolios

    Beschreibung Principles, practices, and procedures for successful portfolio management. Axelos, MoP Weiterführende Links Weitere Informationen können Sie hier nachlesen. Schlagwörter Management of portfolios


  • MoR – Management of Risk

    Beschreibung The M_o_R guidance shows you how the principles, processes, and techniques can be embedded, reviewed, and applied to your work practices by considering the nature of the objectives at risk. It allows you to make informed, effective decisions about the use of resources and initiating change. Axelos, MoR Weiterführende Links Weitere Informationen können Sie…


  • MoV – Management of value

    Beschreibung The MoV guidance explains how to use resources as efficiently and effectively as possible. At the portfolio level, it sets the agenda for the projects and programmes that will deliver your objectives. The agenda then defines the projects that will be undertaken to achieve your required outcomes. Axelos, MoV Weiterführende Links Weitere Informationen erhalten…


  • MSP – Managing Successful Programms

    Beschreibung MSP (Managing Successful Programmes), 5th edition is an established best practice programme management framework, designed to align programmes and projects to organizational strategy and enable enterprise agility. MSP focuses on the delivery of outcomes of benefit, while mitigating risk and actively engaging stakeholders. Axelos, MSP Weiterführende Links Weitere Informationen können Sie hier nachlesen. Schlagwörter…


  • NIST 800-30 – Guide for Conducting Risk Assessments

    Beschreibung The purpose of Special Publication 800-30 is to provide guidance for conducting risk assessments of federal information systems and organizations, amplifying the guidance in Special Publication 800-39.  NIST Weiterführende Links Das Dokument kann hier heruntergeladen werden. Schlagwörter Cost-benefit analysis — residual risk — risk — risk assessment — risk management — risk mitigation — security controls…