ISO/IEC 19770-8:2020 情報技術— IT資産管理—パート8：業界慣行をISO / IEC19770ファミリーの標準との間でマッピングするためのガイドライン | ページ 2

Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, 1. In particular, the different approval criteria needed for the different types of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, 2 (see www.iso.org/directives ).

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents ) or the IEC list of patent declarations received (see http://patents.iec.ch ).

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see www.iso.org/iso/foreword.html .

This document was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 7, Software and systems engineering.

A list of all parts in the ISO/IEC 19770 series can be found on the ISO website.

Introduction

This document defines formats and gives requirements and guidelines on the creation of documents describing the relationships between ISO/IEC 19770-1 and industry practices. The documents are referred to as “mapping documents” throughout the rest of this document.

The intention of this document is that the formats defined are applicable to a wide range of industry practices, including both those published by standards bodies, industry organizations or software publishers, and those defined in a unique manner within organizations.

The formats defined in this document support “bidirectional mappings”, where both the industry practice can be mapped to ISO/IEC 19770-1, and ISO/IEC 19770-1 can be mapped to the industry practice. It is expected that many mappings incorporate both aspects for clarity and convenience.

To the extent this document refers to ISO/IEC 19770-1:2012 it supports and builds on, the information contained in Annex C of that standard. ISO/IEC 19770-1:2012, Annex C contains mapping information to and from industry best practice guidance that referenced the following sources:

• 1) International Association of IT Asset Managers (IAITAM) Best Practice Library;
• 2) Two documents from the Association of SAM Assessment and Certification (SAMAC) based in Japan;
• 3) The Information Systems Audit and Control Association (ISACA) Control Objectives for Information and Related Technology CobiT 4.1® framework, used with permission of ISACA/ITGI [ www.isaca.org ] ©1996-2007 ITGI.

Having this information available no doubt simplifies the learning curve in the adoption of ISO/IEC 19770-1 and enhances its visibility. However, experience with this information highlighted several issues with distributing this information in an annex to ISO/IEC 19770-1, namely:

• 1) the authors of the source information release revisions and updates in a very different manner, and on a very different schedule, from the update cycle of International Standards;
• 2) much of the source information is protected as Intellectual Property with copyright, trademarks or sometimes even patents. Getting the permission to quote this information in an International Standard is often tedious, time-consuming and difficult;
• 3) including references and URLs to external resources in an International Standard is at best unstable, and at worst open to abuse.

This document seeks to ameliorate these issues by taking a different approach, by merely defining formats, guidance and other resources for the creation of these “mappings documents”, and relying on the authors of the source information or a related party to create the mappings documents themselves — which then generally remain under their change control. The document also provides guidance on how the originators and authors should interact with JTC 1/SC 7/WG 21 during this process if they choose to do so — such an interaction is not mandatory for using the information in this document. However, guidance on a number of optional styles of interaction is given, and such an interaction is encouraged.

1 Scope

This document defines requirements, guidelines, formats and approaches for use when producing a mapping document that defines how industry practices map to/from the ISO/IEC 19770 series.

This edition is focused solely on mappings to/from both the second edition of ISO/IEC 19770-1 that was published in 2012, or the third edition of ISO/IEC 19770-1 that was published in 2017. However, the title of this document is deliberately more general as it is expected that future editions of this document also include mapping frameworks related to other parts of the ISO/IEC 19770 series.

In this document where reference is made to ISO/IEC 19770-1 without the specification of an edition number or a publication year, then the text applies to all editions of ISO/IEC 19770-1.

2 Normative references

The following documents are referred to in the text in such a way that some or all of their content constitutes requirements of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.

3 Terms and definitions

For the purposes of this document, the terms and definitions given in ISO/IEC 19770-5 and the following apply.

ISO and IEC maintain terminological databases for use in standardization at the following addresses:

Bibliography