資訊委外風險評估程序之研究－以國軍某單位為例

Information Service Outsourcing Risk Assessment-A Case Study on Military

吳百昌(Pai C. Wu) ； 尹延齡(Yen L. Yin)

《國防管理學術暨實務研討會》 第十八屆 (2010/06) Pp. 472-491

https://doi.org/10.29497/GFGL.201006.0472

摘要

國際上以委外方式協助企業應用資訊系統的專案數量及金額大幅提昇，根據Gartner公司的研究指出，全球委外服務2009年的金額為三千二百四十億美元，預估2014年底將會到達萬億美元的龐大規模。國內2008年的委外經費約為二百七十七億台幣，政府行政機關的委外經費也逐年上升，但資訊委外工作推動的同時，也面臨資訊人員快速流失、職務異動頻繁、經驗傳承不易等的問題，讓資訊委外工作推動愈顯困難。為有效辨識、分析與處理風險，進而達成資訊委外的建置效益，本研究將以國軍為研究對象，採用德菲法的問卷方式，調查「資訊委外」領域專家對委外風險的意見，藉以瞭解執行資訊委外專案實際面臨的風險因素，並運用簡易的Excel統計軟體進行發生可能性與影響嚴重性的數值分析，統計資訊委外的風險值，以找出影響關鍵風險因素，來針對高風險的因素訂定標準作業程序，有效降低資訊委外風險對國軍造成的影響，探討資訊服務委外專案的「風險評估」與「標準作業程序」等作為，可提升新進人員對資訊委外的風險認知，且能增加風險的掌控程度，運用標準作業程序來達到風險管理之成效。

關鍵字

資訊委外 ； 風險管理 ； 風險評估 ； 德菲法 ； 標準作業程序

並列摘要

The international community to provide assistance to enterprise application outsourcing project information system to enhance the number and amount of significant, according to research firm Gartner, the global outsourcing services in 2009 amounted to 324 billion U.S. dollars, will be expected by the end of 2014 large scale to reach 1 trillion U.S. dollars. Outsourcing of domestic funds in 2008 was about 27.7 billion NT dollars, the government funds the executive outsourcing on the rise, but the ITO work to promote, but also face the loss of information quickly, frequent changes of position, experience difficult issues such as inheritance, so that ITO has become more difficult to promote the work. For the effective identification, analysis and manage risk, and then build effective ITO reached, this research will study the military is using the Delphi method of questionnaire survey, ”ITO” the risk of contracting experts in the field views, in order to understand the actual implementation of ITO project risk factors, and use a simple Excel statistical software and the impact of the seriousness of the possibility of occurrence of numerical analysis, statistical value of ITO risk, to identify key risk factors affecting, to target high-risk factors set standard operating procedures, effective ITO reduce risk on the military impact of information services outsourcing project ”risk assessment” and ”standard operating procedures” such as, can enhance the new staff on ITO risk perception, and can increase the risk of the control level, the use of standard operating procedures to achieve the risk management effectiveness.

並列關鍵字

ITO ； Risk Management ； Delphi Method ； Standard Operating Procedures