TFL Vsebine / Revija SIR*IUS

Approach to Information System Review

Dandanes se večina podjetij srečuje z izzivi obvladovanja informacijske komunikacijske tehnologije (odslej IKT). Za uspešno pridobljeno informacijo o stanju IKT oziroma o stanju celovitega informacijskega sistema (odslej IS) nasploh se lahko v podjetju izvede skrben pregled IS. Prispevek opredeljuje pojma skrbni pregled in začetni skrbni pregled ter v Sloveniji razvit celovit pristop za izvedbo skrbnega pregleda IS. S tem pristopom je možno v zelo kratkem času izvesti skrbni pregled IS v manjših in večjih podjetjih, kar je razvidno iz tabele časovnega obsega za izvedbo takih aktivnosti. Celovit pristop vključuje tudi odločitveni model, ki pomaga pri nadaljnjih odločitvah. Predstavljeni so tudi kratki zgledi pregledov v izbranih državah Evrope in zmožnosti uporabe tega celovitega pristopa v Sloveniji.

Nowadays the majority of organizations are faced with the challenges of Information and Communication technology (ICT) governance. In order to obtain effective information on the status of ICT or information system (IS) in general, organizations can perform IS due diligence activities. The article outlines definitions of due diligence and initial due diligence. It presents the approach for IS due diligence which was developed in Slovenia and is called a Framework for IS due diligence. By means of this framework IS due diligence can be conducted in a very short timeframe in a small or large organization, as it includes a table indicating how much time due diligence activities take depending on the size of the organization. A decision model is integrated into the framework, which serves as the basis to decide which activities to undertake in the future. Short case studies of reviews in five selected countries in Europe are also presented, as well as possible uses of the framework in Slovenia.