{"id":4,"date":"2026-09-03T09:58:53","date_gmt":"2026-09-03T09:58:53","guid":{"rendered":"https:\/\/medanet.ir\/cobit\/cobit-2019-governance-system-components-seven\/"},"modified":"2026-09-03T09:58:53","modified_gmt":"2026-09-03T09:58:53","slug":"cobit-2019-governance-system-components-seven","status":"publish","type":"post","link":"https:\/\/medanet.ir\/cobit\/cobit-2019-governance-system-components-seven\/","title":{"rendered":"\u0627\u062c\u0632\u0627\u06cc \u0646\u0638\u0627\u0645 \u062d\u0627\u06a9\u0645\u06cc\u062a COBIT 2019\u061b \u06f7 Component \u06a9\u0647 \u062d\u0627\u06a9\u0645\u06cc\u062a IT \u0631\u0627 \u0627\u0632 Process \u0641\u0631\u0627\u062a\u0631 \u0645\u06cc\u200c\u0628\u0631\u0646\u062f"},"content":{"rendered":"

\u0633\u0646\u0627\u0631\u06cc\u0648 \u0631\u0627 \u0627\u06cc\u0646\u200c\u0637\u0648\u0631 \u062f\u0631 \u0646\u0638\u0631 \u0628\u06af\u06cc\u0631\u06cc\u062f: \u0633\u0627\u0632\u0645\u0627\u0646 \u062f\u0647\u200c\u0647\u0627 Process \u062a\u0639\u0631\u06cc\u0641 \u06a9\u0631\u062f\u0647\u060c \u0628\u0631\u0627\u06cc Change\u060c Incident\u060c Security \u0648 Project Management \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644 \u062f\u0627\u0631\u062f \u0648 \u062d\u062a\u06cc KPI \u0647\u0645 \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644 \u062a\u0635\u0645\u06cc\u0645\u200c\u0647\u0627\u06cc \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0647 \u0627\u0641\u0631\u0627\u062f \u0648\u0627\u0628\u0633\u062a\u0647\u200c\u0627\u0646\u062f\u060c \u0645\u0633\u0626\u0648\u0644\u06cc\u062a\u200c\u0647\u0627 \u0645\u0628\u0647\u0645 \u0627\u0633\u062a \u0648 \u0631\u0641\u062a\u0627\u0631 \u0648\u0627\u0642\u0639\u06cc \u0633\u0627\u0632\u0645\u0627\u0646 \u0628\u0627 Policy\u0647\u0627 \u0641\u0627\u0635\u0644\u0647 \u062f\u0627\u0631\u062f. \u0627\u06cc\u0646\u062c\u0627 \u0645\u0634\u06a9\u0644 \u0644\u0632\u0648\u0645\u0627\u064b \u06a9\u0645\u0628\u0648\u062f Process \u0646\u06cc\u0633\u062a\u061b \u0645\u0633\u0626\u0644\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0646\u0638\u0627\u0645 \u062d\u0627\u06a9\u0645\u06cc\u062a<\/strong> \u0641\u0642\u0637 \u0627\u0632 Process \u0633\u0627\u062e\u062a\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n

\u062f\u0631 COBIT 2019\u060c Governance System \u0627\u0632 \u0686\u0646\u062f Component \u062a\u0634\u06a9\u06cc\u0644 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0628\u0627 \u0647\u0645 \u06a9\u0627\u0631 \u06a9\u0646\u0646\u062f. \u0634\u0646\u0627\u062e\u062a \u0627\u06cc\u0646 \u0627\u062c\u0632\u0627 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u062f\u0647\u062f \u0633\u0627\u0632\u0645\u0627\u0646 \u0627\u0632 \u0646\u06af\u0627\u0647 \u00ab\u0641\u0631\u0622\u06cc\u0646\u062f\u0645\u062d\u0648\u0631\u0650 \u0635\u0631\u0641\u00bb \u0639\u0628\u0648\u0631 \u06a9\u0646\u062f \u0648 \u0633\u0627\u062e\u062a\u0627\u0631\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u060c \u0641\u0631\u0647\u0646\u06af\u060c \u0645\u0647\u0627\u0631\u062a \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0631\u0627 \u0647\u0645 \u0648\u0627\u0631\u062f \u0637\u0631\u0627\u062d\u06cc \u062d\u0627\u06a9\u0645\u06cc\u062a \u06a9\u0646\u062f.<\/p>\n

COBIT 2019 \u0627\u0632 Governance System \u0686\u0647 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u062f\u061f<\/h2>\n

COBIT \u06cc\u06a9 \u0686\u0627\u0631\u0686\u0648\u0628 \u062d\u0627\u06a9\u0645\u06cc\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0641\u0646\u0627\u0648\u0631\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0686\u0627\u0631\u0686\u0648\u0628\u060c Governance System \u0628\u0627\u06cc\u062f \u0645\u062a\u0646\u0627\u0633\u0628 \u0628\u0627 \u0632\u0645\u06cc\u0646\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0637\u0631\u0627\u062d\u06cc \u0634\u0648\u062f \u0648 \u0627\u062c\u0632\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0622\u0646 \u0647\u0645\u200c\u0631\u0627\u0633\u062a\u0627 \u0628\u0627\u0634\u0646\u062f. \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u062f\u0627\u0634\u062a\u0646 \u0686\u0646\u062f Procedure \u06cc\u0627 \u06af\u0631\u0641\u062a\u0646 \u06cc\u06a9 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0628\u0644\u0648\u063a\u060c \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u0628\u0647 \u0645\u0639\u0646\u06cc \u062d\u0627\u06a9\u0645\u06cc\u062a \u0645\u0624\u062b\u0631 \u0646\u06cc\u0633\u062a.<\/p>\n

\u0628\u0631\u0627\u06cc \u0645\u0631\u0648\u0631 \u06a9\u0644\u06cc COBIT \u0648 \u062e\u062f\u0645\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0635\u0641\u062d\u0647 COBIT \u062f\u0631 \u0645\u062f\u0627\u0646\u062a<\/a> \u0645\u0631\u062c\u0639 Pillar \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0627\u0633\u062a.<\/p>\n

\u06f7 Component \u0627\u0635\u0644\u06cc \u0646\u0638\u0627\u0645 \u062d\u0627\u06a9\u0645\u06cc\u062a COBIT 2019<\/h2>\n\n\n\n\n\n\n\n\n\n\n\n
Component<\/th>\n\u067e\u0631\u0633\u0634 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc<\/th>\n\u0646\u0645\u0648\u0646\u0647 Evidence<\/th>\n<\/tr>\n<\/thead>\n
Processes<\/td>\n\u06a9\u0627\u0631 \u0686\u06af\u0648\u0646\u0647 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f\u061f<\/td>\nWorkflow\u060c Control\u060c KPI<\/td>\n<\/tr>\n
Organizational Structures<\/td>\n\u0686\u0647 \u06a9\u0633\u06cc \u062a\u0635\u0645\u06cc\u0645 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f\u061f<\/td>\nCommittee\u060c RACI\u060c Authority<\/td>\n<\/tr>\n
Principles, Policies and Procedures<\/td>\n\u0642\u0627\u0639\u062f\u0647 \u0631\u0633\u0645\u06cc \u0686\u06cc\u0633\u062a\u061f<\/td>\nPolicy \u0648 Procedure \u0645\u0635\u0648\u0628<\/td>\n<\/tr>\n
Information<\/td>\n\u062a\u0635\u0645\u06cc\u0645 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0686\u0647 \u062f\u0627\u062f\u0647\u200c\u0627\u06cc \u06af\u0631\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u061f<\/td>\nReport\u060c Record\u060c Dashboard<\/td>\n<\/tr>\n
Culture, Ethics and Behavior<\/td>\n\u0631\u0641\u062a\u0627\u0631 \u0648\u0627\u0642\u0639\u06cc \u0633\u0627\u0632\u0645\u0627\u0646 \u0686\u06cc\u0633\u062a\u061f<\/td>\n\u0627\u0644\u06af\u0648\u06cc \u062a\u0635\u0645\u06cc\u0645\u060c Accountability<\/td>\n<\/tr>\n
People, Skills and Competencies<\/td>\n\u0686\u0647 \u062a\u0648\u0627\u0646\u0645\u0646\u062f\u06cc\u200c\u0647\u0627\u06cc\u06cc \u0644\u0627\u0632\u0645 \u0627\u0633\u062a\u061f<\/td>\nRole Profile\u060c Skill Matrix<\/td>\n<\/tr>\n
Services, Infrastructure and Applications<\/td>\n\u0686\u0647 \u062a\u0648\u0627\u0646\u0645\u0646\u062f\u0633\u0627\u0632 \u0641\u0646\u06cc \u0644\u0627\u0632\u0645 \u0627\u0633\u062a\u061f<\/td>\nPlatform\u060c Tool\u060c Architecture<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u06f1. Processes\u061b \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0627\u0645\u0627 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a<\/h2>\n

Process \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627 \u0686\u06af\u0648\u0646\u0647 \u0627\u0632 \u0648\u0631\u0648\u062f\u06cc \u0628\u0647 \u062e\u0631\u0648\u062c\u06cc \u0645\u06cc\u200c\u0631\u0633\u0646\u062f\u060c \u0686\u0647 Control\u0647\u0627\u06cc\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 Performance \u0686\u06af\u0648\u0646\u0647 \u0633\u0646\u062c\u06cc\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u0645\u0627 \u0627\u06af\u0631 Owner \u0648\u0627\u0642\u0639\u06cc\u060c \u062f\u0627\u062f\u0647 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u06cc\u0627 \u0631\u0641\u062a\u0627\u0631 \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0645\u0646\u0627\u0633\u0628 \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f\u060c \u0628\u0647\u062a\u0631\u06cc\u0646 Process \u0647\u0645 \u0631\u0648\u06cc \u06a9\u0627\u063a\u0630 \u0645\u06cc\u200c\u0645\u0627\u0646\u062f.<\/p>\n

\u06f2. Organizational Structures\u061b \u062a\u0635\u0645\u06cc\u0645\u200c\u06af\u06cc\u0631 \u0648\u0627\u0642\u0639\u06cc \u0631\u0627 \u0645\u0634\u062e\u0635 \u06a9\u0646\u06cc\u062f<\/h2>\n

Committee\u060c Board\u060c Steering Group \u0648 \u0646\u0642\u0634\u200c\u0647\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc\u06cc \u0628\u0627\u06cc\u062f Authority \u0631\u0648\u0634\u0646 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f. \u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0637\u0627\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 RACI \u0646\u0648\u0634\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0627\u0645\u0627 \u062a\u0635\u0645\u06cc\u0645 \u0646\u0647\u0627\u06cc\u06cc \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0627 \u0631\u0627\u0628\u0637\u0647 \u063a\u06cc\u0631\u0631\u0633\u0645\u06cc \u06cc\u0627 Escalation \u0634\u062e\u0635\u06cc \u06af\u0631\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n

\u0628\u0631\u0627\u06cc \u0637\u0631\u0627\u062d\u06cc Governance \u0628\u0627\u06cc\u062f \u0645\u0634\u062e\u0635 \u0634\u0648\u062f \u0686\u0647 \u062a\u0635\u0645\u06cc\u0645\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u0633\u0637\u062d Board\u060c CIO\u060c Security Committee \u06cc\u0627 Change Authority \u06af\u0631\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f \u0648 \u0686\u0647 Evidence\u0627\u06cc \u0628\u0631\u0627\u06cc \u0622\u0646 \u062a\u0635\u0645\u06cc\u0645 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a.<\/p>\n

\u06f3. Principles, Policies and Procedures\u061b \u0627\u0632 \u0634\u0639\u0627\u0631 \u062a\u0627 \u0642\u0627\u0639\u062f\u0647 \u0627\u062c\u0631\u0627\u06cc\u06cc<\/h2>\n

Principle \u062c\u0647\u062a\u200c\u06af\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062f\u0647\u062f\u060c Policy \u0627\u0644\u0632\u0627\u0645 \u0631\u0627 \u0645\u0634\u062e\u0635 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 Procedure \u0631\u0648\u0634 \u0627\u062c\u0631\u0627\u06cc \u0622\u0646 \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0633\u0647 \u0633\u0637\u062d \u0646\u0628\u0627\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0634\u062a\u0628\u0627\u0647 \u0634\u0648\u0646\u062f. \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644 \u00abLeast Privilege\u00bb \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Principle \u0628\u0627\u0634\u062f\u060c Access Control Policy \u0627\u0644\u0632\u0627\u0645\u200c\u0647\u0627 \u0631\u0627 \u0645\u0634\u062e\u0635 \u06a9\u0646\u062f \u0648 Joiner\/Mover\/Leaver Procedure \u0631\u0648\u0634 \u0627\u062c\u0631\u0627\u06cc \u0622\u0646 \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u06a9\u0646\u062f.<\/p>\n

\u06f4. Information\u061b Governance \u0628\u062f\u0648\u0646 \u062f\u0627\u062f\u0647 \u0645\u0639\u062a\u0628\u0631 \u06a9\u0648\u0631 \u0627\u0633\u062a<\/h2>\n

\u062a\u0635\u0645\u06cc\u0645 \u062d\u0627\u06a9\u0645\u06cc\u062a\u06cc \u0628\u0627\u06cc\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u0645\u062a\u06a9\u06cc \u0628\u0627\u0634\u062f \u06a9\u0647 \u062f\u0642\u06cc\u0642\u060c \u0628\u0647\u200c\u0645\u0648\u0642\u0639\u060c \u0642\u0627\u0628\u0644\u200c\u0631\u062f\u06cc\u0627\u0628\u06cc \u0648 \u0645\u062a\u0646\u0627\u0633\u0628 \u0628\u0627 \u062a\u0635\u0645\u06cc\u0645 \u0628\u0627\u0634\u062f. Dashboard \u067e\u0631 \u0627\u0632 \u0646\u0645\u0648\u062f\u0627\u0631\u060c \u0627\u06af\u0631 Definition \u0634\u0627\u062e\u0635\u200c\u0647\u0627 \u0645\u0634\u062e\u0635 \u0646\u0628\u0627\u0634\u062f\u060c \u0644\u0632\u0648\u0645\u0627\u064b Information \u0645\u0641\u06cc\u062f \u062a\u0648\u0644\u06cc\u062f \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n

\u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u06cc<\/h3>\n

\u0627\u06af\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u062f \u062f\u0631\u0628\u0627\u0631\u0647 Cyber Risk \u062a\u0635\u0645\u06cc\u0645 \u0628\u06af\u06cc\u0631\u062f\u060c \u0635\u0631\u0641 \u062a\u0639\u062f\u0627\u062f Alert\u0647\u0627 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a. \u0628\u0627\u06cc\u062f Asset Criticality\u060c Incident Impact\u060c Control Effectiveness \u0648 Trend \u0646\u06cc\u0632 \u062f\u0631 Context \u062f\u06cc\u062f\u0647 \u0634\u0648\u0646\u062f.<\/p>\n

\u06f5. Culture, Ethics and Behavior\u061b \u0628\u062e\u0634 \u0646\u0627\u0645\u0631\u0626\u06cc \u062d\u0627\u06a9\u0645\u06cc\u062a<\/h2>\n

\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a Policy \u0628\u06af\u0648\u06cc\u062f Change \u0628\u062f\u0648\u0646 Approval \u0627\u062c\u0631\u0627 \u0646\u0634\u0648\u062f\u060c \u0627\u0645\u0627 \u0641\u0631\u0647\u0646\u06af \u062a\u06cc\u0645 \u0627\u06cc\u0646 \u0628\u0627\u0634\u062f \u06a9\u0647 \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0634\u0627\u0631 \u00ab\u0628\u0639\u062f\u0627\u064b Ticket \u0645\u06cc\u200c\u0632\u0646\u06cc\u0645\u00bb. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a \u0645\u0634\u06a9\u0644 Process \u0646\u06cc\u0633\u062a\u061b \u0631\u0641\u062a\u0627\u0631 \u0648\u0627\u0642\u0639\u06cc \u0628\u0627 Governance Model \u062a\u0636\u0627\u062f \u062f\u0627\u0631\u062f.<\/p>\n

Culture \u0631\u0627 \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0641\u0642\u0637 \u0628\u0627 \u0633\u0646\u062f \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f. Incentive\u060c Leadership Behavior\u060c Accountability \u0648 \u0646\u062d\u0648\u0647 \u0628\u0631\u062e\u0648\u0631\u062f \u0628\u0627 Exception\u0647\u0627 \u0631\u0648\u06cc \u0622\u0646 \u0627\u062b\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u0646\u062f.<\/p>\n

\u06f6. People, Skills and Competencies\u061b \u0646\u0642\u0634 \u0628\u062f\u0648\u0646 \u062a\u0648\u0627\u0646\u0645\u0646\u062f\u06cc \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a<\/h2>\n

\u0627\u062e\u062a\u0635\u0627\u0635 \u0639\u0646\u0648\u0627\u0646 \u00abProcess Owner\u00bb \u06cc\u0627 \u00abRisk Owner\u00bb \u0628\u0647 \u0641\u0631\u062f\u06cc \u06a9\u0647 \u062f\u0627\u0646\u0634\u060c \u0632\u0645\u0627\u0646 \u06cc\u0627 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0644\u0627\u0632\u0645 \u0646\u062f\u0627\u0631\u062f\u060c Governance \u0631\u0627 \u0635\u0648\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. Skill Matrix\u060c Succession Plan \u0648 Training \u0628\u0627\u06cc\u062f \u0628\u062e\u0634\u06cc \u0627\u0632 \u0637\u0631\u0627\u062d\u06cc Governance \u0628\u0627\u0634\u0646\u062f.<\/p>\n

\u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u0645\u0633\u06cc\u0631 \u0622\u0645\u0648\u0632\u0634 \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0647\u0633\u062a\u0646\u062f\u060c \u062e\u062f\u0645\u0627\u062a \u0622\u0645\u0648\u0632\u0634 \u0645\u062f\u0627\u0646\u062a<\/a> \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0633\u06cc\u0631 \u062a\u0648\u0627\u0646\u0645\u0646\u062f\u0633\u0627\u0632\u06cc \u0646\u0642\u0634\u200c\u0647\u0627 \u0645\u062a\u0635\u0644 \u0634\u0648\u062f.<\/p>\n

\u06f7. Services, Infrastructure and Applications\u061b Tool \u0628\u0627\u06cc\u062f Governance \u0631\u0627 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u06a9\u0646\u062f<\/h2>\n

\u0627\u0628\u0632\u0627\u0631 \u062c\u0627\u06cc Governance \u0631\u0627 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u062f\u060c \u0627\u0645\u0627 Governance \u0628\u062f\u0648\u0646 \u0627\u0628\u0632\u0627\u0631 \u0645\u0646\u0627\u0633\u0628 \u062f\u0631 \u0645\u0642\u06cc\u0627\u0633 \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u062f\u0634\u0648\u0627\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f. Service Management\u060c GRC\u060c IAM\u060c SIEM\u060c Monitoring \u0648 Asset Management \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 Platform\u0647\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f Evidence\u060c Workflow \u0648 Control \u0631\u0627 \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u06a9\u0646\u0646\u062f.<\/p>\n

\u0686\u0631\u0627 \u0627\u06cc\u0646 \u06f7 Component \u0628\u0627\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0637\u0631\u0627\u062d\u06cc \u0634\u0648\u0646\u062f\u061f<\/h2>\n

\u0627\u06af\u0631 \u0641\u0642\u0637 Process \u0627\u0635\u0644\u0627\u062d \u0634\u0648\u062f \u0627\u0645\u0627 Structure \u0647\u0645\u0627\u0646 \u0628\u0645\u0627\u0646\u062f\u060c Approval \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0647\u0645\u0686\u0646\u0627\u0646 \u0645\u0628\u0647\u0645 \u0628\u0627\u0634\u062f. \u0627\u06af\u0631 Tool \u062e\u0631\u06cc\u062f\u0627\u0631\u06cc \u0634\u0648\u062f \u0627\u0645\u0627 Culture \u062a\u063a\u06cc\u06cc\u0631 \u0646\u06a9\u0646\u062f\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 Control\u0647\u0627 \u0631\u0627 \u062f\u0648\u0631 \u0645\u06cc\u200c\u0632\u0646\u0646\u062f. \u0627\u06af\u0631 Policy \u0646\u0648\u0634\u062a\u0647 \u0634\u0648\u062f \u0627\u0645\u0627 Information \u06a9\u0627\u0641\u06cc \u0646\u0628\u0627\u0634\u062f\u060c Management \u0646\u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Effectiveness \u0631\u0627 \u0628\u0633\u0646\u062c\u062f.<\/p>\n\n\n\n\n\n\n\n\n\n
\u0646\u0634\u0627\u0646\u0647 \u0634\u06a9\u0633\u062a<\/th>\nComponent \u0645\u062d\u062a\u0645\u0644<\/th>\n\u0627\u0642\u062f\u0627\u0645 \u0627\u0635\u0644\u0627\u062d\u06cc<\/th>\n<\/tr>\n<\/thead>\n
\u062a\u0635\u0645\u06cc\u0645\u200c\u0647\u0627 \u0628\u0647 \u0627\u0641\u0631\u0627\u062f \u062e\u0627\u0635 \u0648\u0627\u0628\u0633\u062a\u0647\u200c\u0627\u0646\u062f<\/td>\nOrganizational Structures<\/td>\n\u062a\u0639\u0631\u06cc\u0641 Authority \u0648 RACI \u0648\u0627\u0642\u0639\u06cc<\/td>\n<\/tr>\n
Policy \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u0648\u0644\u06cc \u0631\u0639\u0627\u06cc\u062a \u0646\u0645\u06cc\u200c\u0634\u0648\u062f<\/td>\nCulture\/Behavior<\/td>\nAccountability \u0648 Exception Review<\/td>\n<\/tr>\n
KPI\u0647\u0627 \u0645\u0648\u0631\u062f \u0627\u0639\u062a\u0645\u0627\u062f \u0646\u06cc\u0633\u062a\u0646\u062f<\/td>\nInformation<\/td>\n\u062a\u0639\u0631\u06cc\u0641 Data Owner \u0648 Data Quality<\/td>\n<\/tr>\n
Process Owner \u062a\u0635\u0645\u06cc\u0645 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u062f<\/td>\nPeople\/Structure<\/td>\n\u0627\u062e\u062a\u06cc\u0627\u0631 \u0648 Competency Review<\/td>\n<\/tr>\n
\u06a9\u0627\u0631\u0647\u0627 \u062f\u0633\u062a\u06cc \u0648 \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 Audit \u0647\u0633\u062a\u0646\u062f<\/td>\nServices\/Applications<\/td>\nAutomation \u0648 Workflow \u0645\u0646\u0627\u0633\u0628<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u0627\u0631\u062a\u0628\u0627\u0637 Components \u0628\u0627 Design Factors \u0686\u06cc\u0633\u062a\u061f<\/h2>\n

Design Factors \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f Governance System \u0645\u062a\u0646\u0627\u0633\u0628 \u0628\u0627 Strategy\u060c Risk Profile\u060c Threat Landscape\u060c Sourcing Model \u0648 \u0633\u0627\u06cc\u0631 \u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646 \u0637\u0631\u0627\u062d\u06cc \u0634\u0648\u062f\u061b \u0633\u067e\u0633 Component\u0647\u0627 \u0628\u0627\u06cc\u062f \u0628\u0631\u0627\u06cc \u0622\u0646 \u0637\u0631\u0627\u062d\u06cc \u0639\u0645\u0644\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u0648\u0646\u062f. \u0645\u0642\u0627\u0644\u0647 Design Factors \u062f\u0631 COBIT<\/a> \u0627\u06cc\u0646 \u0644\u0627\u06cc\u0647 \u0631\u0627 \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062a\u0648\u0636\u06cc\u062d \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n

\u0627\u0632 Goals Cascade \u0686\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u0627\u06cc \u06a9\u0646\u06cc\u0645\u061f<\/h2>\n

Goals Cascade \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u062f\u0647\u062f \u0646\u06cc\u0627\u0632 Stakeholder \u0628\u0647 Enterprise Goal\u060c Alignment Goal \u0648 Governance\/Management Objective \u0645\u062a\u0635\u0644 \u0634\u0648\u062f. \u0627\u06cc\u0646 \u0645\u0633\u06cc\u0631 \u062a\u0639\u06cc\u06cc\u0646 \u0645\u06cc\u200c\u06a9\u0646\u062f \u00ab\u0686\u0647 \u0686\u06cc\u0632\u06cc\u00bb \u0628\u0627\u06cc\u062f \u062d\u0627\u0635\u0644 \u0634\u0648\u062f\u061b Component\u0647\u0627 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u00ab\u0628\u0627 \u0686\u0647 \u0646\u0638\u0627\u0645\u06cc\u00bb \u0622\u0646 \u0646\u062a\u06cc\u062c\u0647 \u067e\u0627\u06cc\u062f\u0627\u0631 \u0634\u0648\u062f. \u0631\u0627\u0647\u0646\u0645\u0627\u06cc Goals Cascade \u062f\u0631 COBIT 2019<\/a> \u0645\u06a9\u0645\u0644 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0627\u0633\u062a.<\/p>\n

Runbook \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0633\u0631\u06cc\u0639 Governance System<\/h2>\n
    \n
  1. \u06cc\u06a9 Objective \u06cc\u0627 \u0645\u0633\u0626\u0644\u0647 \u0648\u0627\u0642\u0639\u06cc \u0645\u062b\u0644 Cyber Risk \u06cc\u0627 Service Availability \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f.<\/li>\n
  2. Process\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0631\u0627 \u0641\u0647\u0631\u0633\u062a \u06a9\u0646\u06cc\u062f.<\/li>\n
  3. Decision Authority \u0648 Structure \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n
  4. Policy \u0648 Procedure\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0631\u0627 \u0628\u0627 \u0631\u0641\u062a\u0627\u0631 \u0648\u0627\u0642\u0639\u06cc \u0645\u0642\u0627\u06cc\u0633\u0647 \u06a9\u0646\u06cc\u062f.<\/li>\n
  5. Information \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u062a\u0635\u0645\u06cc\u0645 \u0631\u0627 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n
  6. Skill Gap \u0646\u0642\u0634\u200c\u0647\u0627 \u0631\u0627 \u0645\u0634\u062e\u0635 \u06a9\u0646\u06cc\u062f.<\/li>\n
  7. Tool \u0648 Infrastructure \u067e\u0634\u062a\u06cc\u0628\u0627\u0646 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/li>\n
  8. Gap\u0647\u0627 \u0631\u0627 \u0628\u0647 Roadmap \u0642\u0627\u0628\u0644 \u0627\u0648\u0644\u0648\u06cc\u062a\u200c\u0628\u0646\u062f\u06cc \u062a\u0628\u062f\u06cc\u0644 \u06a9\u0646\u06cc\u062f.<\/li>\n<\/ol>\n

    \u0646\u06a9\u0627\u062a \u06a9\u0644\u06cc\u062f\u06cc<\/h2>\n