C\u00e1c t\u1ed5 ch\u1ee9c \u0111ang x\u00e2y d\u1ef1ng s\u1ef1 tr\u01b0\u1edfng th\u00e0nh v\u1ec1 m\u1eb7t v\u1eadn h\u00e0nh t\u1ea1i Vi\u1ec7t Nam th\u01b0\u1eddng ph\u1ea3i \u0111\u1ed1i m\u1eb7t v\u1edbi m\u1ed9t c\u00e2u h\u1ecfi th\u1ef1c t\u1ebf: n\u00ean s\u1eed d\u1ee5ng khu\u00f4n kh\u1ed5 n\u00e0o \u0111\u1ec3 \u0111\u1ecbnh h\u01b0\u1edbng c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng v\u00e0 ho\u1ea1t \u0111\u1ed9ng CNTT, ITIL, ISO 27001, hay c\u1ea3 hai?<\/p>\n
Hai khu\u00f4n kh\u1ed5 n\u00e0y ph\u1ee5c v\u1ee5 c\u00e1c m\u1ee5c \u0111\u00edch kh\u00e1c nhau, b\u1ed5 sung cho nhau.<\/p>\n
ITIL t\u1eadp trung v\u00e0o qu\u1ea3n l\u00fd d\u1ecbch v\u1ee5: c\u00e1ch th\u1ee9c thi\u1ebft k\u1ebf, cung c\u1ea5p, h\u1ed7 tr\u1ee3 v\u00e0 c\u1ea3i ti\u1ebfn c\u00e1c d\u1ecbch v\u1ee5 CNTT theo th\u1eddi gian. N\u00f3 cung c\u1ea5p c\u1ea5u tr\u00fac cho qu\u1ea3n l\u00fd s\u1ef1 c\u1ed1, qu\u1ea3n l\u00fd thay \u0111\u1ed5i v\u00e0 hi\u1ec7u su\u1ea5t m\u1ee9c \u0111\u1ed9 d\u1ecbch v\u1ee5.<\/p>\n
Ti\u00eau chu\u1ea9n ISO 27001 t\u1eadp trung c\u1ee5 th\u1ec3 v\u00e0o qu\u1ea3n l\u00fd an ninh th\u00f4ng tin: c\u00e1ch th\u1ee9c m\u1ed9t t\u1ed5 ch\u1ee9c x\u00e1c \u0111\u1ecbnh, qu\u1ea3n l\u00fd v\u00e0 gi\u1ea3m thi\u1ec3u r\u1ee7i ro an ninh th\u00f4ng tin m\u1ed9t c\u00e1ch c\u00f3 h\u1ec7 th\u1ed1ng.<\/p>\n
Tr\u00ean th\u1ef1c t\u1ebf, s\u1ef1 kh\u00e1c bi\u1ec7t n\u00e0y th\u1ec3 hi\u1ec7n r\u00f5 r\u00e0ng trong c\u00e1ch x\u1eed l\u00fd s\u1ef1 c\u1ed1. M\u1ed9t t\u1ed5 ch\u1ee9c \u0111\u00e3 \u00e1p d\u1ee5ng ITIL th\u00e0nh th\u1ea1o s\u1ebd c\u00f3 quy tr\u00ecnh \u0111\u01b0\u1ee3c ghi ch\u00e9p l\u1ea1i \u0111\u1ec3 ph\u00e1t hi\u1ec7n, leo thang v\u00e0 gi\u1ea3i quy\u1ebft s\u1ef1 c\u1ed1 gi\u00e1n \u0111o\u1ea1n d\u1ecbch v\u1ee5, v\u1edbi tr\u00e1ch nhi\u1ec7m r\u00f5 r\u00e0ng \u1edf m\u1ed7i giai \u0111o\u1ea1n. N\u1ebfu \u00e1p d\u1ee5ng th\u00eam ti\u00eau chu\u1ea9n ISO 27001, quy tr\u00ecnh x\u1eed l\u00fd s\u1ef1 c\u1ed1 t\u01b0\u01a1ng t\u1ef1 s\u1ebd c\u00f3 th\u00eam c\u00e1c quy \u0111\u1ecbnh v\u1ec1 ph\u00e2n lo\u1ea1i b\u1ea3o m\u1eadt, l\u01b0u gi\u1eef b\u1eb1ng ch\u1ee9ng v\u00e0 ngh\u0129a v\u1ee5 th\u00f4ng b\u00e1o c\u1ee5 th\u1ec3 cho t\u1eebng lo\u1ea1i d\u1eef li\u1ec7u ho\u1eb7c h\u1ec7 th\u1ed1ng b\u1ecb \u1ea3nh h\u01b0\u1edfng. N\u1ebfu kh\u00f4ng c\u00f3 n\u1ec1n t\u1ea3ng ITIL, c\u00e1c y\u00eau c\u1ea7u b\u1ea3o m\u1eadt c\u1ee7a ISO 27001 ch\u1ec9 t\u1ed3n t\u1ea1i d\u01b0\u1edbi d\u1ea1ng c\u00e1c tuy\u00ean b\u1ed1 ch\u00ednh s\u00e1ch m\u00e0 kh\u00f4ng c\u00f3 quy tr\u00ecnh v\u1eadn h\u00e0nh \u0111\u00e1ng tin c\u1eady \u0111\u1ec3 th\u1ef1c hi\u1ec7n ch\u00fang m\u1ed9t c\u00e1ch nh\u1ea5t qu\u00e1n.<\/p>\n
M\u00f4 h\u00ecnh t\u01b0\u01a1ng t\u1ef1 l\u1eb7p l\u1ea1i trong qu\u1ea3n l\u00fd thay \u0111\u1ed5i v\u00e0 ki\u1ec3m so\u00e1t truy c\u1eadp. Quy tr\u00ecnh thay \u0111\u1ed5i c\u00f3 c\u1ea5u tr\u00fac c\u1ee7a ITIL cung c\u1ea5p cho y\u00eau c\u1ea7u c\u1ee7a ISO 27001 v\u1ec1 c\u00e1c thay \u0111\u1ed5i \u0111\u01b0\u1ee3c ki\u1ec3m so\u00e1t v\u00e0 c\u00f3 th\u1ec3 ki\u1ec3m to\u00e1n \u0111\u01b0\u1ee3c m\u1ed9t c\u01a1 s\u1edf c\u1ee5 th\u1ec3 \u0111\u1ec3 g\u1eafn k\u1ebft. Vi\u1ec7c c\u1ed1 g\u1eafng l\u00e0m ng\u01b0\u1ee3c l\u1ea1i, x\u00e2y d\u1ef1ng c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t an ninh tr\u01b0\u1edbc v\u00e0 hy v\u1ecdng m\u1ed9t quy tr\u00ecnh v\u1eadn h\u00e0nh s\u1ebd h\u00ecnh th\u00e0nh xung quanh ch\u00fang sau \u0111\u00f3, l\u00e0 l\u00fd do t\u1ea1i sao r\u1ea5t nhi\u1ec1u khung b\u1ea3o m\u1eadt cu\u1ed1i c\u00f9ng ch\u1ec9 l\u00e0 nh\u1eefng b\u00e0i t\u1eadp l\u1eadp t\u00e0i li\u1ec7u t\u00e1ch r\u1eddi kh\u1ecfi c\u00e1ch th\u1ee9c c\u00f4ng vi\u1ec7c th\u1ef1c s\u1ef1 di\u1ec5n ra h\u00e0ng ng\u00e0y.<\/p>\n
C\u00e1c nh\u00e0 cung c\u1ea5p v\u00e0 kh\u00e1ch h\u00e0ng doanh nghi\u1ec7p ng\u00e0y c\u00e0ng h\u1ecfi v\u1ec1 c\u1ea3 hai khu\u00f4n kh\u1ed5 trong qu\u00e1 tr\u00ecnh mua s\u1eafm, v\u00ec v\u1eady c\u00e2u h\u1ecfi v\u1ec1 th\u1ee9 t\u1ef1 th\u1ef1c hi\u1ec7n kh\u00f4ng ch\u1ec9 \u0111\u01a1n thu\u1ea7n l\u00e0 v\u1ea5n \u0111\u1ec1 n\u1ed9i b\u1ed9. Vi\u1ec7c c\u00f3 th\u1ec3 m\u00f4 t\u1ea3 m\u1ed9t l\u1ed9 tr\u00ecnh ph\u00e1t tri\u1ec3n to\u00e0n di\u1ec7n, thay v\u00ec m\u1ed9t s\u1ef1 k\u1ebft h\u1ee3p r\u1eddi r\u1ea1c c\u1ee7a c\u1ea3 hai khu\u00f4n kh\u1ed5, th\u01b0\u1eddng t\u1ea1o \u0111\u01b0\u1ee3c \u1ea5n t\u01b0\u1ee3ng t\u1ed1t h\u01a1n trong c\u00e1c cu\u1ed9c th\u1ea3o lu\u1eadn so v\u1edbi vi\u1ec7c ch\u1ec9 s\u1eed d\u1ee5ng m\u1ed9t khu\u00f4n kh\u1ed5 ri\u00eang l\u1ebb.<\/p>\n
M\u1ed9t sai l\u1ea7m th\u01b0\u1eddng g\u1eb7p l\u00e0 theo \u0111u\u1ed5i ch\u1ee9ng nh\u1eadn ISO 27001 nh\u01b0 m\u1ed9t y\u00eau c\u1ea7u b\u00e1n h\u00e0ng ho\u1eb7c tu\u00e2n th\u1ee7 tr\u01b0\u1edbc khi c\u00f3 \u0111\u01b0\u1ee3c k\u1ef7 lu\u1eadt v\u1eadn h\u00e0nh c\u01a1 b\u1ea3n. B\u1ea3n th\u00e2n cu\u1ed9c ki\u1ec3m to\u00e1n ch\u1ee9ng nh\u1eadn th\u01b0\u1eddng c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua n\u1ebfu c\u00f3 \u0111\u1ea7y \u0111\u1ee7 t\u00e0i li\u1ec7u, ch\u00ednh s\u00e1ch v\u00e0 c\u00e1c cu\u1ed9c ph\u1ecfng v\u1ea5n \u0111\u01b0\u1ee3c chu\u1ea9n b\u1ecb k\u1ef9 l\u01b0\u1ee1ng. \u0110i\u1ec1u th\u01b0\u1eddng th\u1ea5t b\u1ea1i sau \u0111\u00f3 l\u00e0 vi\u1ec7c tu\u00e2n th\u1ee7 h\u00e0ng ng\u00e0y, b\u1edfi v\u00ec c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 \u0111\u00e1p \u1ee9ng y\u00eau c\u1ea7u c\u1ee7a ng\u01b0\u1eddi ki\u1ec3m to\u00e1n h\u01a1n l\u00e0 \u0111\u1ec3 ph\u00f9 h\u1ee3p m\u1ed9t c\u00e1ch t\u1ef1 nhi\u00ean v\u1edbi c\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng th\u1ef1c t\u1ebf c\u1ee7a \u0111\u1ed9i ng\u0169 v\u1eadn h\u00e0nh.<\/p>\n
K\u1ebft qu\u1ea3 l\u00e0 m\u1ed9t chu k\u1ef3 d\u1ec5 \u0111o\u00e1n: c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t suy gi\u1ea3m gi\u1eefa c\u00e1c l\u1ea7n ki\u1ec3m to\u00e1n, c\u00e1c l\u1ed7 h\u1ed5ng t\u00edch l\u0169y, v\u00e0 vi\u1ec7c t\u00e1i ch\u1ee9ng nh\u1eadn n\u0103m sau tr\u1edf th\u00e0nh m\u1ed9t cu\u1ed9c ch\u1ea1y \u0111ua \u0111\u1ec3 t\u00e1i t\u1ea1o b\u1eb1ng ch\u1ee9ng thay v\u00ec x\u00e1c nh\u1eadn th\u1ef1c ti\u1ec5n \u1ed5n \u0111\u1ecbnh. Vi\u1ec7c x\u00e2y d\u1ef1ng n\u1ec1n t\u1ea3ng ITIL tr\u01b0\u1edbc ti\u00ean s\u1ebd tr\u00e1nh \u0111\u01b0\u1ee3c chu k\u1ef3 n\u00e0y, b\u1edfi v\u00ec c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t an ninh \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p v\u00e0o c\u00e1c quy tr\u00ecnh m\u00e0 nh\u00f3m \u0111\u00e3 tu\u00e2n theo v\u00ec nh\u1eefng l\u00fd do v\u1eadn h\u00e0nh ho\u00e0n to\u00e0n ri\u00eang bi\u1ec7t, \u0111i\u1ec1u n\u00e0y l\u00e0m cho ch\u00fang c\u00f3 nhi\u1ec1u kh\u1ea3 n\u0103ng \u0111\u01b0\u1ee3c duy tr\u00ec h\u01a1n.<\/p>\n
C\u00e1c t\u1ed5 ch\u1ee9c th\u01b0\u1eddng c\u1ea7n c\u1ea3 hai, nh\u01b0ng th\u1ee9 t\u1ef1 th\u1ef1c hi\u1ec7n r\u1ea5t quan tr\u1ecdng. ITIL cung c\u1ea5p n\u1ec1n t\u1ea3ng v\u1eadn h\u00e0nh \u0111\u1ec3 tri\u1ec3n khai v\u00e0 duy tr\u00ec c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t an ninh hi\u1ec7u qu\u1ea3 m\u1ed9t c\u00e1ch \u0111\u00e1ng tin c\u1eady.<\/p>\n
\u0110\u1ed1i v\u1edbi c\u00e1c t\u1ed5 ch\u1ee9c ho\u1ea1t \u0111\u1ed9ng tr\u00ean nhi\u1ec1u \u0111\u1ecba \u0111i\u1ec3m t\u1ea1i Vi\u1ec7t Nam, tr\u00ecnh t\u1ef1 n\u00e0y c\u00e0ng tr\u1edf n\u00ean quan tr\u1ecdng h\u01a1n, v\u00ec t\u00ednh nh\u1ea5t qu\u00e1n trong ho\u1ea1t \u0111\u1ed9ng gi\u1eefa c\u00e1c \u0111\u1ecba \u0111i\u1ec3m l\u00e0 y\u1ebfu t\u1ed1 quy\u1ebft \u0111\u1ecbnh li\u1ec7u khung b\u1ea3o m\u1eadt c\u00f3 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 d\u1ef1 \u0111\u1ecbnh hay ch\u1ec9 t\u1ed3n t\u1ea1i tr\u00ean gi\u1ea5y t\u1edd.<\/p>\n
\u0110\u1ed1i v\u1edbi c\u00e1c t\u1ed5 ch\u1ee9c \u0111ang trong giai \u0111o\u1ea1n \u0111\u1ea7u c\u1ee7a h\u00e0nh tr\u00ecnh n\u00e0y, m\u1ed9t nguy\u00ean t\u1eafc h\u1eefu \u00edch l\u00e0 n\u00ean tr\u00ec ho\u00e3n vi\u1ec7c th\u1ea3o lu\u1eadn v\u1ec1 ch\u1ee9ng nh\u1eadn ISO 27001 cho \u0111\u1ebfn khi qu\u1ea3n l\u00fd s\u1ef1 c\u1ed1, qu\u1ea3n l\u00fd thay \u0111\u1ed5i v\u00e0 b\u00e1o c\u00e1o m\u1ee9c \u0111\u1ed9 d\u1ecbch v\u1ee5 ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng tin c\u1eady m\u1ed9t c\u00e1ch \u0111\u1ed9c l\u1eadp, ngay c\u1ea3 khi kh\u00f4ng ch\u00ednh th\u1ee9c. S\u1ef1 s\u1eb5n s\u00e0ng cho ch\u1ee9ng nh\u1eadn th\u01b0\u1eddng \u0111i sau s\u1ef1 s\u1eb5n s\u00e0ng v\u1ec1 m\u1eb7t v\u1eadn h\u00e0nh, v\u00e0 hi\u1ebfm khi ho\u1ea1t \u0111\u1ed9ng t\u1ed1t n\u1ebfu theo th\u1ee9 t\u1ef1 ng\u01b0\u1ee3c l\u1ea1i.<\/p>\n
C\u0169ng c\u1ea7n l\u01b0u \u00fd r\u1eb1ng kh\u00f4ng c\u1ea7n ph\u1ea3i \u00e1p d\u1ee5ng to\u00e0n b\u1ed9 khung chu\u1ea9n n\u00e0o ngay t\u1eeb ng\u00e0y \u0111\u1ea7u ti\u00ean. Nhi\u1ec1u t\u1ed5 ch\u1ee9c b\u1eaft \u0111\u1ea7u v\u1edbi c\u00e1c quy tr\u00ecnh ITIL c\u1ee5 th\u1ec3 ph\u00f9 h\u1ee3p nh\u1ea5t v\u1edbi nh\u1eefng v\u1ea5n \u0111\u1ec1 hi\u1ec7n t\u1ea1i c\u1ee7a h\u1ecd, th\u01b0\u1eddng l\u00e0 qu\u1ea3n l\u00fd s\u1ef1 c\u1ed1 v\u00e0 thay \u0111\u1ed5i, v\u00e0 m\u1edf r\u1ed9ng sang khung chu\u1ea9n \u0111\u1ea7y \u0111\u1ee7 h\u01a1n khi m\u1ee9c \u0111\u1ed9 tr\u01b0\u1edfng th\u00e0nh v\u1ec1 m\u1eb7t v\u1eadn h\u00e0nh t\u0103ng l\u00ean. C\u00e1ch ti\u1ebfp c\u1eadn t\u1eebng b\u01b0\u1edbc t\u01b0\u01a1ng t\u1ef1 c\u0169ng hi\u1ec7u qu\u1ea3 \u0111\u1ed1i v\u1edbi c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t ISO 27001, b\u1eaft \u0111\u1ea7u v\u1edbi c\u00e1c lo\u1ea1i d\u1eef li\u1ec7u v\u00e0 h\u1ec7 th\u1ed1ng c\u00f3 r\u1ee7i ro cao nh\u1ea5t thay v\u00ec c\u1ed1 g\u1eafng bao qu\u00e1t to\u00e0n di\u1ec7n ngay l\u1eadp t\u1ee9c. C\u00e1ch ti\u1ebfp c\u1eadn theo t\u1eebng giai \u0111o\u1ea1n n\u00e0y nh\u00ecn chung b\u1ec1n v\u1eefng h\u01a1n so v\u1edbi vi\u1ec7c tri\u1ec3n khai \u0111\u1ed3ng lo\u1ea1t m\u1ed9t trong hai khung chu\u1ea9n.<\/p>\n
C\u00e1c t\u1ed5 ch\u1ee9c x\u00e2y d\u1ef1ng k\u1ef7 lu\u1eadt v\u1eadn h\u00e0nh d\u1ef1a tr\u00ean ITIL tr\u01b0\u1edbc, sau \u0111\u00f3 m\u1edbi b\u1ed5 sung c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t ISO 27001 l\u00ean tr\u00ean, th\u01b0\u1eddng \u0111\u1ea1t \u0111\u01b0\u1ee3c ch\u1ee9ng nh\u1eadn v\u1edbi \u00edt tr\u1edf ng\u1ea1i h\u01a1n v\u00e0 duy tr\u00ec ch\u1ee9ng nh\u1eadn \u0111\u00f3 b\u1ec1n v\u1eefng h\u01a1n nhi\u1ec1u.<\/strong><\/p>","protected":false},"excerpt":{"rendered":" Organisations building operational maturity in Vietnam often face a practical question: which framework should guide infrastructure and IT operations, ITIL, ISO 27001, or both? The two frameworks serve different, complementary purposes. What Each Framework Actually Covers ITIL focuses on service management: how IT services are designed, delivered, supported and improved over time. It provides structure […]<\/p>\n","protected":false},"author":2,"featured_media":2028,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"department":[],"working-type":[],"location":[],"class_list":["post-2027","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insights"],"_links":{"self":[{"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/posts\/2027","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/comments?post=2027"}],"version-history":[{"count":1,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/posts\/2027\/revisions"}],"predecessor-version":[{"id":2029,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/posts\/2027\/revisions\/2029"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/media\/2028"}],"wp:attachment":[{"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/media?parent=2027"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/categories?post=2027"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/tags?post=2027"},{"taxonomy":"department","embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/department?post=2027"},{"taxonomy":"working-type","embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/working-type?post=2027"},{"taxonomy":"location","embeddable":true,"href":"https:\/\/ausasiatechnologies.com\/vi\/wp-json\/wp\/v2\/location?post=2027"}],"curies":[{"name":"trang web","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}