‘Nuove’ tendenze : Standard e relative Certificazioni ICT · ‘Nuove’ tendenze : Standard e...

AIEA Sessione di Studio Milano – 07.06.2013 by Green Mill Solutions

‘Nuove’ tendenze :

Standard e relative Certificazioni ICT

AIEA - Sessione di Studio

Milano 07.06.2013


Today’s AGENDA

• Green Mill Solutions Company Facts

• Overview Scope

• Main Areas for IT & Business Alignment

• Standards and related Certifications

– At an Organizational Level

• Certifications & Audits

– At an IT Professional Skills Level

• Training and Certification Tracks

• Other ‘Popular’ Certifications

• Some Global Numbers

Nr. 2


Company Facts

• Green Mill Solutions, Established 2011, Rome & Milan

• Company Mission : Become a Leading Provider for IT Quality - Services & Solutions in Italy

• IT Quality for us covers areas such as :

- IT Service Management (ITIL®, ISO/IEC-20000),

- IT Governance (COBIT®)

- Project Management (PMI, PRINCE2)

- Security and Continuity (ISO/IEC 2700x, ISO 22301)

- Sourcing: ITaaSC (IT as a Supply Chain) & CL(OUT)-Sourcing

- Corporate Social Responsibilities such as : Green-IT

• Our Services & Solutions include :

- Professional Training & Consultancy - Provisioning & Implementation support of ICT QM Tools (Vendors/OpenSource)

Nr. 3


• Overview of most Common ICT Standards & Certifications

• Out of Scope :

Vendor Specific Certification, e,g, :

Micorsoft

Cisco

VMWare, etc..

• Certification Levels :

At Organizational Level

At IT Professional Level

Nr. 4

Scope


Main Areas for IT and Business Alignment

• An interesting Point of View to try to map the most common Standards and Certifications is based on the ICT Standards Model

by: ICTSTANDARDS.ORG

Nr. 5


Main Areas for IT and Business Alignment

• The Model is based on Four Main IT Layers (Areas) with Business Intersections for constant Alignment :

Nr. 6


Standards and related Certifications

• LAYER 1 : Service Management

Nr. 7



• LAYER 1 : Service Management Organizational Level Certifications :

Nr. 8



• LAYER 1 : Service Management Organizational Level Certifications : ISO/IEC 20000:2011

Nr. 9


ISO/IEC 20000:2011 (formaly BS 15000) consists of two parts :

ISO/IEC 20000-1:2011 is the formal specification and defines the requirements for an organization to deliver managed services of an acceptable quality for its customers. The scope includes:

– Requirements for a service management system

– Planning and implementing service management

– Planning and implementing new or changed services

– Service delivery process

– Relationship processes

– Resolution processes

– Control processes

– Release processes.

ISO/IEC 20000-2:2011 is the Code of Practice and describes the best practices for Service Management processes within the scope of ISO/IEC 20000-1. The code of Practice will be of particular use to organizations preparing to be audited against ISO/IEC 20000 or planning service improvements.

Audits performed by ISO/IEC 20000 RCBs, every 3 years main + yearly intermediate a Registered Certification Body is also ISO/IEC 17021:2006 certified a list of RCBs at : http://www.isoiec20000certification.com/home/CertificationBodies/RCBs/RCBsListings.aspx

a list of Certified Companies (+ 700) : http://www.isoiec20000certification.com/home/ISOCertifiedOrganizations/ISOCountryListings.aspx

Nr. 10


http://www.isoiec20000certification.com/home/CertificationBodies/RCBs/RCBsListings.aspx

http://www.isoiec20000certification.com/home/ISOCertifiedOrganizations/ISOCountryListings.aspx



Nr. 11

ISO/IEC 20000

• LAYER 1 : Service Management IT Professional Level Certifications :



Nr. 12

ISO/IEC 20000

• LAYER 1 : Service Management IT Professional Level Certifications : ISO/IEC 20000



Nr. 13

• LAYER 1 : Service Management IT Professional Level Certifications : ISO/IEC 20000 EXIN vs. APMG



Nr. 14




Nr. 15




Nr. 16


3 days

3 days

2 days



Nr. 17

ISO/IEC 20000

• LAYER 1 : Service Management IT Professional Level Certifications : ITIL®

ITIL® is a registered trade mark of the Cabinet Office.

ISO/IEC 20000



Nr. 18

ISO/IEC 20000


NB ! AMPG replaced by CAPITA in 2014 !


ISO/IEC 20000



Nr. 19

ISO/IEC 20000


NB ! MOF Microsoft Operations Framework


ISO/IEC 20000


Capability Stream : OS&A – Operational Support & Analysis

PP&O – Planning, Protection & Optimization

RC&V – Release Control & Validation

SO&A - Service Offerings & Agreements

Lifecycle Stream : SS – Service Strategy

SD – Service Design

ST – Service Transition

SO – Service Operation

CSI – Continual Service Improvement

ITIL® v2011 Qualification Scheme

Nr. 20












ITIL® v2011 Process List : Strategy Management for IT Services

Service Portfolio Management

Demand Management

Financial Management for IT Services

Business Relationship Management

Design Coordination

Service Catalogue Management

Service Level Management

Capacity Management

Availability Management

IT Service Continuity Management

Information Security Management

Supplier Management

Transition Planning and Support

Service Asset and Configuration Management

Change Management

Change Evaluation

Release and Deployment Management

Service Validation and Testing

Knowledge Management

Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management

7-Step Improvement Process

ITIL® v2011 Qualification Scheme

Nr. 21














Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


ITIL Foundation

Nr. 22

ITIL® v2011 Qualification Scheme Foundation














Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


SS

Nr. 23

Standards and related Certifications ITIL® v2011 Qualification Scheme SS













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


SD

Nr. 24

Standards and related Certifications ITIL® v2011 Qualification Scheme SD













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


ST

Nr. 25

Standards and related Certifications ITIL® v2011 Qualification Scheme ST













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


SO

Nr. 26

Standards and related Certifications ITIL® v2011 Qualification Scheme SO













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


CSI

Nr. 27

Standards and related Certifications ITIL® v2011 Qualification Scheme CSI













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


SOA

Nr. 28

Standards and related Certifications ITIL® v2011 Qualification Scheme SOA













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


PPO

Nr. 29

Standards and related Certifications ITIL® v2011 Qualification Scheme PPO













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


RCV

Nr. 30

Standards and related Certifications ITIL® v2011 Qualification Scheme RCV













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


OSA

Nr. 31

Standards and related Certifications ITIL® v2011 Qualification Scheme OSA













Demand Management



Design Coordination



Capacity Management




Supplier Management



Change Management

Change Evaluation




Event Management

Incident Management

Request Fulfilment

Access Management

Problem Management


Managing Across The Lifecycle

Nr. 32

Standards and related Certifications ITIL® v2011 Qualification Scheme MALC











Nr. 33

Standards and related Certifications ITIL® v2011 Qualification Scheme Expert

ITIL Expert

Passing the MALC exam candidates automatically reaches the EXPERT Level.











Nr. 34

Standards and related Certifications ITIL® v2011 Qualification Scheme Master To be eligible for the ITIL Master

Qualification, candidates must :

- Have reached the ITIL Expert Level

- Have worked in IT service

management for at least five

years in leadership, managerial,

or higher management advisory

levels.

A candidate must ensure they have

an extensive base of practical 'hands-

on' ITIL experience to enable them to

demonstrate active involvement in

implementation of the practices, in

order to meet the requirements for

the Qualification.

ITIL Master



Nr. 35

ISO/IEC 20000

• LAYER 1 : Service Management Organizational Level Certifications : ISO 22301 (Formaly BS 25999)

ISO/IEC 20000 ITIL®



• LAYER 1 : Service Management Organizational Level Certifications : ISO 22301 (Formaly BS 25999)

ISO 22301:2012 The Business Continuity Standard comprises two parts:

Part 1, the Code of Practice,

provides BCM best practice

recommendations.

Please note that this is a guidance

document only.

Part 2, the Specification, provides the requirements for a Business

Continuity Management System (BCMS) based on BCM best practice.

This is the part of the standard that you can use to demonstrate

compliance via an auditing and certification process.

Being independently certified to the ISO 22301:2012 Part 2 by an

independent third-party, will be the ultimate assurance to your

stakeholders that you comply with BCM best practice.

Fonte : Massimo Cacciotti per AIEA Aprile 2012



Nr. 37

ISO/IEC 20000

• LAYER 1 : Service Management IT Professional Level Certifications : ISO 22301 (Formaly BS 25999)


ISO 22301



Nr. 38

• LAYER 1 : Service Management IT Professional Level Certifications : ISO 22301:2012 (Formaly BS 25999)

ISO 22301 Certifications : - ISO 22301 Internal Auditor (BSI) 2 day Course - ISO 22301 Lead Auditor (BSI) 5 day Course incl. Exam



Nr. 39

ISO/IEC 20000

• LAYER 2 : Project Management IT Professional Level Certifications :


ISO 22301 ISO 22301



Nr. 40

ISO/IEC 20000

• LAYER 2 : Project Management IT Professional Level Certifications : PMI / PMP®


ISO 22301 ISO 22301


Certified Associate in

Project Management (CAPM)®

(23 hours)

Nr. 41

Project Management

Professional (PMP)®

(35 hours)

Program Management

Professional (PgMP)®


PMI Agile Certified

Professional (PMI-ACP)®

PMI Risk Management


PMI Risk Management


Certified Associate in Project Management (CAPM)®

Project Management Professional (PMP)®

Program Management Professional (PgMP)®

PMI Agile Certified Practitioner (PMI-ACP)®

PMI Risk Management Professional (PMI-RMP)®

PMI Scheduling Professional (PMI-SP

PMI, PMP, CAPM, PgMP, PMI-SP, PMI-RMP, PMBOK, and the PMI Registered Education Provider logo are registered

trademarks of the Project Management Institute, Inc. registered in the United States and other nations

Based on PMI’s PMBOK®

http://www.pmi.org/Certification/Certified-Associate-in-Project-Management-CAPM.aspx

http://www.pmi.org/Certification/Certified-Associate-in-Project-Management-CAPM.aspx

http://www.pmi.org/Certification/Project-Management-Professional-PMP.aspx

http://www.pmi.org/Certification/Project-Management-Professional-PMP.aspx

http://www.pmi.org/Certification/Project-Management-Professional-PgMP.aspx




http://www.pmi.org/Certification/New-PMI-Agile-Certification.aspx




http://www.pmi.org/Certification/PMI-Risk-Management-Professional-PMI-RMP.aspx




http://www.pmi.org/Certification/PMI-Scheduling-Professional-PMI-SP.aspx




PMP Examination Content Outline : http://www.pmi.org/en/Certification/Project-Management-Professional-

PMP/~/media/PDF/Certifications/PMP%20Examination%20Content%20Outline_2010.ashx

Source: PMP Handbook Nr. 42


http://www.pmi.org/en/Certification/Project-Management-Professional-PMP/~/media/PDF/Certifications/PMP Examination Content Outline_2010.ashx








PMP Certification Exam • From the application form approval date, candidates have 1 year to pass the PMP

Certification exam (3 trials allowed)

• The exam is performed at a Prometric examination site (reservation can be made online on www.prometric.com/pmi )

• Computer-based testing (multiple-choice), 4 choices (only 1 correct) per question

• 200 questions (175 scored + 25 pretest). Pretest questions are randomly distributed throughout the 200 questions and cannot be recognized.

• Passing rate: 61% on 175 scored questions (106 correctly answered)

• 4 hours to complete. Breaks can be made but they don’t stop the examination time

• Italian language aid available upon request

• Books, calculators, food, drinks, dictionaries, coats, watches etc. are NOT allowed during examination (they can be desposited outside the examination room). Calculator is embedded in CBT, paper and pencil are provided by Prometric.

Source: PMP Handbook Nr. 43


http://www.prometric.com/pmi


Maintain PMP Credential

• The PMP Certification expires after 3 years (+ 1 year of suspension) if no action is taken

• To maintain the credential, PMP certified project managers have to collect and submit to PMI 60 PDUs (Professional Development Units) within each 3-year certification cycle

• PDUs can be obtained through:

• For more detailed information about the entire PMP Certification process, please check out this link :

Source: PMP Handbook

http://www.pmi.org/en/Certifiction/~/media/PDF/Certifications/pdc_pmphandbook.ashx

Nr. 44


http://www.pmi.org/en/Certifiction/~/media/PDF/Certifications/pdc_pmphandbook.ashx



Nr. 45

ISO/IEC 20000

• LAYER 2 : Project Management IT Professional Level Certifications : PRINCE2®

PRINCE2® is a registered trade mark of the Cabinet Office.


ISO 22301 ISO 22301

PMI / PMP®




• Foundation




• Practitioner




• Professional



Nr. 49

ISO/IEC 20000

• LAYER 2 : Project Management Organizational Level Certifications : ’PMO’


ISO 22301 ISO 22301

PMI / PMP®

PRINCE2®

PMO



Nr. 50

ISO/IEC 20000

• LAYER 3 : Sourcing & Vendor Management Organizational Level Certifications :


ISO 22301 ISO 22301

PMI / PMP®

PRINCE2®

PMO



Nr. 51

ISO/IEC 20000

• LAYER 3 : Sourcing & Vendor Management Organizational Level Certifications : eSCM-SP & eSCM-CL by ITSqc (CM)


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®



Nr. 52

ISO/IEC 20000

• LAYER 3 : Sourcing & Vendor Management Organizational Level Certifications : eSCM-SP & eSCM-CL

. eSourcing Capability Model for Service Providers eSourcing Capability Model for Client Organizations


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

http://www.itsqc.org/models/escm-sp/index.html




Nr. 53

• LAYER 3 : Sourcing & Vendor Management Organizational Level Certifications : eSCM-SP & eSCM-CL

. eSourcing Capability Model for Service Providers eSourcing Capability Model for Client Organizations

Certification Process

An Evaluation for Certification is a third-party external evaluation of an

organization's capability. These are the only eSCM Capability Determination

methods that can lead to certification by ITSqc, and should be used when an

organization wants a public record of its capabilities. A Full Evaluation for

Certification is based on a review of the organization's implementation of all

Practices in an eSCM Model (either eSCM-SP or eSCM-CL).

Only an Evaluation for Certification leads to an ITSqc certification.

Organizations may be certified to the eSCM-CL (clients) and/or the eSCM-SP

(service providers).

www.itsqc.org



http://www.itsqc.org/



Nr. 54

• eSCM-SP v2



Nr. 55

• eSCM-SP v2 – 84 Best Practices



Nr. 56

• eSCM-CL v1.1



Nr. 57

• eSCM-CL v1.1 – 95 Best Practices



Nr. 58

ISO/IEC 20000

• LAYER 3 : Sourcing & Vendor Management IT Professional Level Certifications :

eSCM-SP/CL


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®



Nr. 59

ISO/IEC 20000

• LAYER 3 : Sourcing & Vendor Management IT Professional Level Certifications : aCOP/COP (Out-)Sourcing OPBOK®


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

eSCM-SP/CL



• LAYER 3 : Sourcing & Vendor Management IT Professional Level Certifications : aCOP/COP (Out-)Sourcing OPBok®

• COP Certification Requisites 150p - Attend COP Master Class ( 5 days) + Exam 200 Qs (70% pass) 75p aCOP

- Documented Knowledge & Experience 75p 10 KAs www.iaop.org

IAOP® and OPBok® are a registered trade

marks of IAOP.

http://www.iaop.org/



Nr. 61

ISO/IEC 20000

• LAYER 4 : Strategy & Governance Organizational Level Certifications :

aCOP/COP


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

eSCM-SP/CL



Nr. 62

ISO/IEC 20000

• LAYER 4 : Strategy & Governance Organizational Level Certifications : ISO/IEC 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL



Nr. 63

• LAYER 4 : Strategy & Governance Organizational Level Certifications : ISO/IEC 27001

ISO/IEC 27001:2005 Certification by RCB valid for 3 Years

The ISO/IEC 27001:2005 standard was published in October 2005,

essentially replacing the old BS7799-2 standard. It covers all types of

organizations (e.g. commercial enterprises, government agencies, not-

for profit organizations). ISO/IEC 27001:2005 specifies the

requirements for establishing, implementing, operating, monitoring,

reviewing, maintaining and improving a documented Information

Security Management System within the context of the organization's

overall business risks. It specifies requirements for the implementation

of security controls customized to the needs of individual organizations

or parts thereof.

ISO/IEC 27001:2005 is designed to ensure the selection of adequate

and proportionate security controls that protect information assets and

give confidence to interested parties.



Nr. 64

ISO/IEC 20000

• LAYER 4 : Strategy & Governance IT Professional Level Certifications :

ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL



Nr. 65

ISO/IEC 20000

• LAYER 4 : Strategy & Governance IT Professional Level Certifications : ISO/IEC 27001 / 27002 CISM

ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL



Nr. 66

• LAYER 4 : Strategy & Governance IT Professional Level Certifications : ISO/IEC 27001 / 27002 CISM

ISO/IEC 27001 Certifications : (=Requirements) - ISO/IEC 27001 Foundation (APMG) - ISO/IEC 27001 Internal Auditor (BSI) - ISO/IEC 27001 Lead Auditor (BSI)

ISO/IEC 27002 Certifications : (= Best Practice) - ISO/IEC 27001 Foundation (EXIN) - ISO/IEC 27001 Advanced (EXIN) - ISO/IEC 27001 Expert (EXIN)

CISM Certification by ISACA Combined with

CISA Certification by ISACA for Security Auditor



Nr. 67

ISO/IEC 20000

• LAYER 4 : Strategy & Governance Organizational Level Certifications : CMMI

ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL



Nr. 68

ISO/IEC 20000

• LAYER 4 : Strategy & Governance Organizational Level Certifications : CMMI

ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL



Nr. 69

• LAYER 4 : Strategy & Governance Organizational Level Certifications : CMMI Appraisal

E.g. CMMI-SVC (for Services) CMMI Appraisal Methods for Process Improvement (SCAMPI) Used for Rating Companies on their level of Process Maturity (Levels 1 to 5)

http://www.google.it/url?sa=i&source=images&cd=&cad=rja&docid=kckm7AlefyjAUM&tbnid=XeGrGGPRHEqIYM:&ved=0CAgQjRwwAA&url=http%3A%2F%2Fcmmicertification.net%2F%3Fq%3Dnode%2F2&ei=xHexUeyaC5CO7Qb0yoC4DQ&psig=AFQjCNH4txOfxsZP86JewX3Ytt-ikWGkqg&ust=1370671428217524



Nr. 70

ISO/IEC 20000

• LAYER 4 : Strategy & Governance Organizational Level Certifications :

ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL

CMMI



Nr. 71

ISO/IEC 20000

• LAYER 4 : Strategy & Governance IT Professional Level Certifications : COBIT®5

ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL

CMMI



Nr. 72


COBIT®5 (Formaly CoBIT 4.1) Certifications : - COBIT®5 Foundation Level (APMG) - COBIT®5 Implementation Level (APMG) - COBIT®5 Assessor Level (APMG)

Details : http://www.apmg-international.com/en/qualifications/cobit5/cobit5.aspx

http://www.apmg-international.com/en/qualifications/cobit5/cobit5.aspx





Nr. 73

ISO/IEC 20000


ISO 27001


ISO 22301 ISO 22301

PMI / PMP®

PMO PRINCE2®

aCOP/COP

eSCM-SP/CL

CMMI



Nr. 74

Other ‘ Popular’ CERTIFICATIONS (Best Practices/Methodologies)

• MOC – Management of Change (Different Flavors)

• Lean Six Sigma (IASSC)

• Cloud Foundation (Exin)

• Testing ° Foundation Level °Advanced Level ° Expert Level

• Green-IT °Citizen °Foundation



Nr. 75

• Some GLOBAL NUMBERS, amount of WW Certifications per Year (2012)

• ITIL - 300K

• PMI - 300K

• PRINCE2 - 130K

Compared to :

• Microsoft - 1,2 M

• Cisco - 800 K

• VMWare - 400 K Source EXIN Feb. 2013


Fine

76

‘Nuove’ tendenze : Standard e relative Certificazioni ICT · ‘Nuove’ tendenze : Standard e...

Documents

Transcript of ‘Nuove’ tendenze : Standard e relative Certificazioni ICT · ‘Nuove’ tendenze : Standard e...