Thesis Type: Postgraduate
Institution Of The Thesis: Orta Doğu Teknik Üniversitesi, Graduate School of Informatics, Information Systems, Turkey
Approval Date: 2010
Student: BETÜL AYGÜN
Supervisor: ALİ ARİFOĞLUAbstract:
Information technology usage has become compulsory for all organizations whether government or private organizations to achieve visibility, compete rivals and execute their missions better. To get desired result from usage of information technology, IT of organization has to be managed well. Up till now, various frameworks are developed to manage it well. Best examples for this kind of frameworks are COBIT and ITIL, containing all processes which can be handled in IT management and becoming widespread through the world. COBIT and ITIL are complementary frameworks rather than competitors. Due to this reason, organizations must implement both of them instead of choosing one of them. In addition to these, ISO/IEC 27001:2005 which focuses on information security management process is a quite famous IT standard in terms of security. This thesis provides organizations to meet requirements of these frameworks/standards which are process based frameworks and standards complementary to each other, with a unique implementation by taking unification of processes in a more simple and understandable way. Consequently, it provides reduction in the duplicate work and prevents inconsistencies that may occur. In addition, including CMMI level two requirements motivate the organization to implement higher maturity level of CMMI. Moreover, this study provides organizations to implement ISO 27001 management structure which establish a foundation for extension to technical structure of it. Besides these, this study provides an alignment of frameworks model and COBIT and ITIL which helps organization to trace ITIL and COBIT simultaneously. Lastly by providing a web based application, there exists foundation for knowledge bank of IT processes in Turkish and profile pages for each organization to manage, trace and reach their own IT processes in a digital environment.