沈阳农商银行科技信息技术的外包项目风险管理研究

发布时间：2018-04-12 18:43

本文选题：科技信息技术 + 项目外包　；参考：《吉林大学》2017年硕士论文

【摘要】：随着我国国内金融市场的不断开放,科技信息在各行各业扮演越来越重要的角色,银行业与现代科技信息技术的融合速度不断加快,尤其是伴随着银行业电子一体化水平不断提高,互联网应用技术的推广普及,逐步融入各领域。“科技兴行,科技创造价值”的理念深入人心,根据国际权威机构“信息系统审计与控制委员会”(ISACA)发布的信息系统风险控制和IT审计工作的最佳实践指南,信息科技风险管理应关注IT治理、信息安全、业务连续性管理、科技信息技术的外包项目管理等几大项目管理领域,其中,银行业科技信息技术的项目外包也越来越多,覆盖技术设备的引进和维护,通信网络的管理,数据中心运作,信息系统的开发与维护,备份和数据恢复,信息技术培训等。由于银行属于技术密集型行业,信息化程度非常高,其核心业务系统安全稳定运行关乎广大人们群众的财产安全,因此,银行非常重视科技信息技术的外包项目风险管理。科技信息技术的创新发展对银行业的价值创造作用越来越大,但是部分中小金融机构出于自身技术积累的不够,自主研发成本过高,周期较长等综合考量,纷纷采取信息科技技术项目外包的途径破解以上难题。凭借科技技术的迅猛发展,尤其是网络通讯升级、办公一体化、远程监控等项目的广泛应用,一些外包服务商集中托管了多家银行的外包业务,如自助设备、终端机、POSS机等等,形成了丰富多样的外包模式。然而,科技信息技术外包是一根双刃剑,银行在享用它带来的高效成果时,也承受着巨大的外部风险,随着金融机构科技信息技术应用的深入和科技信息技术外包服务的创新发展,近年来全国商业银行普遍将科技信息技术外包作为提高科技信息技术服务水平的重要手段,特别是中小银行通过科技信息外包帮助银行提高管理水平和服务效率,节约科技信息建设和运营维护成本,实现科技战略升级。银行科技信息技术外包的内容已由最初的只涉及非核心业务扩展为核心业务系统、系统运营维护与管理等领域。如何在不需要增加人员与成本的前提下,就能获得稳定并且高质量的IT服务,这一点对于城商行为代表的中小商业银行来说,有着特别重要的意义。本文以沈阳农商银行科技信息技术的外包项目风险管理研究为例,运用项目风险管理理论对沈阳农商银行科技信息技术的外包项目风险进行风险识别、评估和监测,进而采取切实有效的风险控制,为中小型商业银行提高科技信息技术的项目外包风险管理水平,守住不发系统性、全局性风险的底线,保持信息系统安全稳定运行提供重要的参考价值和借鉴意义,有助于中小银行进一步提高风险管理水平。本文主要由4个部分构成,首先介绍开展科技信息技术项目外包风险管理的研究背景及现实意义;然后重点分析沈阳农商银行科技信息技术外包项目的现状和分析,指出目前存在的问题;其次,运用沈阳农商银行科技信息技术外包项目的风险识别和分析,对存在的风险进行识别、评估、监测,进而有效管理和合理控制外包项目风险。最后,阐述沈阳农商银行科技信息技术外包项目风险控制的实施与保障,诠释现代商业银行应当对项目外包风险进行科学有效的管理,并且在机制体制和组织架构上提供执行的保障,为中小型商业银行评估科技信息项目外包风险管理水平,提升风险管理水平,充分利用外包供应商节约运营成本的优势,优化资源配置,实现边际利润最大化提供重要参考。
[Abstract]:With the continuous opening of China's domestic financial market, information technology plays an increasingly important role in all walks of life, the banking industry and modern information technology integration is speeding up, especially with the integration level of electronic banking industry continues to improve, promote the popularization of the Internet technology, gradually into various fields. The "science and technology. Popular science and technology to create value" concept, according to the international authoritative organization of "information system audit and Control Commission (ISACA) issued the best practice guidelines for risk control of information system and IT audit, information technology risk management should focus on IT governance, information security, business continuity management, the science and technology field, information technology outsourcing project the management of several major project management, banking information technology outsourcing more and more, and the introduction of technology and equipment maintenance coverage, communication network Network management, data center operations, development and maintenance of information systems, data backup and recovery, information technology training and so on. Because the bank belongs to technology intensive industry, informatization level is very high, its core business system for the safe and stable operation of the people and property safety, therefore, the bank attaches great importance to risk management of outsourcing projects of science and technology the information technology innovation and development of science and technology. The value of information technology in the banking industry to create a more and more important role, but some small and medium-sized financial institutions for their own technology accumulation is not enough, the independent research and development of high cost, long cycle and other comprehensive considerations, have adopted information technology outsourcing approach to solve the above problems. With the rapid development of science and technology especially, network upgrades, office integration, wide application of remote monitoring project, some outsourcing service providers in hosting a number of silver For the outsourcing business, such as self-service equipment, terminal, POSS machine and so on, forming a rich variety of outsourcing mode. However, information technology outsourcing is a double-edged sword, it brings high achievements in the enjoyment of the bank is also under tremendous external risk, with the innovation and development of application of information technology for financial structure deep and information technology outsourcing services, national commercial banks generally take the information technology outsourcing as an important means to improve service level of information technology in recent years, especially the small and medium-sized banks to help through the information technology outsourcing banks to improve the management level and service efficiency, save the information technology construction and operation and maintenance costs, achieve scientific and technological upgrading strategy. The content of the information technology outsourcing bank has been the first relates only to the non core business expansion as the core business system, system operation and maintenance and management. Where does not need to increase staff and cost under the premise, can obtain stable and high quality IT services, this is the city's act on behalf of the small and medium commercial banks, has a special significance. The research on Shenyang rural commercial bank information technology outsourcing project risk management this paper as an example, the use of risk in Shenyang rural commercial bank information technology outsourcing project risk management theory of risk identification, assessment and monitoring, and take effective risk control, for small and medium sized commercial banks to improve the level of information technology outsourcing risk management of the project, the system does not hold, the overall risk of the bottom line, provides an important reference value and significance to keep the stable operation of information system security, to help small and medium-sized banks to further improve the level of risk management. This paper mainly consists of 4 parts, first introduced the development of Science On the background of information technology outsourcing risk management and its practical significance; then analyzes the status quo and analysis of Shenyang rural commercial bank information technology outsourcing project, points out the existing problems; secondly, the use of risk identification and analysis of Shenyang rural commercial bank information technology outsourcing project, to identify the existing risk assessment and monitoring. And then the effective management and reasonable control of outsourcing project risk. Finally, describes the implementation and protection of the Shenyang rural commercial bank information technology outsourcing project risk control, modern commercial banks should be scientific and effective management of the project outsourcing risk, and provide the safeguard mechanism in the implementation of the institutional and organizational framework, for small and medium sized commercial banks to assess the level of outsourcing the information technology risk management of the project, improve the level of risk management, make full use of the advantages of outsourcing supplier operational cost savings It provides an important reference for optimizing the allocation of resources and maximizing marginal profit.

【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：F832.35;F272.3

【参考文献】