(Note) If the information system department manages all the systems subject to the assessment, those systems are
regarded as one IT assessment unit. If the systems are managed by multiple departments, however, it is necessary to
separate IT assessment unit for each department. Also, even when the systems are managed by the same department,
if the management system or procedures are different, their IT assessment units must be separated.
1.5 Step3: Identify IT Assessment Unit
1.5.2 Prepare IT Assessment Unit Definition (sheet)
Define RCM to be applied to each system
-Describe "Assessment unit definition (field)" with RCM No. for each process applied on a system basis.
-Divide RCM and enter RCM No. when multiple management methods are assigned to one process,
Group and enter target systems in "Systems in the scope of assessment" and process owners in "Process owner" of
"IT Assessment Unit Definition" sheet.
-For details of each item on "IT Assessment Unit Definition," refer to "Appendix 4: IT Assessment Unit Definition
Items."
1
The same RCM No. have to
be given to the same group
[IT Assessment Unit (field)] of System List [IT Assessment Unit
Definition] sheet
2
Grouped RCM No. have to have
multiple target systems
It is required to separate the RCM , if
there are multiple management
methods in one process
(1) Define RCM by each applied process in "IT Assessment Unit" of System List.
(2) Enter "Systems in the scope of assessment" and "Process owner" of RCM defined in "IT Assessment Unit"
Prepare [