ขอบเขตที่กิจกรรมที่วางแผนไว้ถูกดำเนินการและผลลัพธ์ที่วางแผนไว้ได้รับการบรรลุ
[SOURCE: ISO 9000:2015, 3.7.11, modified - Note 1 to entry has been removed.]
3.10
ประสิทธิภาพ
ความสัมพันธ์ระหว่างผลลัพธ์ที่ได้และทรัพยากรที่ใช้
[SOURCE: ISO 9000:2015, 3.7.10]
บุคคลหรือกลุ่มคนที่มีหน้าที่ความรับผิดชอบ อำนาจ และความสัมพันธ์ของตนเองเพื่อบรรลุวัตถุประสงค์
[SOURCE: ISO 9000:2015, 3.2.1, modified — Notes 1 and 2 to entry have been removed.]
หมายเหตุ 4 สำหรับรายการ: กระบวนการในองค์กร (3.18) โดยทั่วไปจะถูกวางแผนและดำเนินการภายใต้สภาวะที่ควบคุมเพื่อเพิ่มมูลค่า.
[SOURCE: ISO 9000:2015, 3.4.1, modified - Notes 5 and 6 to entry have been removed.]
3.22
โปรไฟล์
ชุดของมาตรฐานพื้นฐานหนึ่งหรือมากกว่าและ/หรือโปรไฟล์ และเมื่อเหมาะสม การระบุประเภทที่เลือก ชุดที่สอดคล้อง ตัวเลือกและพารามิเตอร์ของมาตรฐานพื้นฐานเหล่านั้น หรือโปรไฟล์ที่ได้มาตรฐานซึ่งจำเป็นในการทำงานเฉพาะ
[SOURCE: ISO/IEC TR 10000-1:1998, 3.1.4, modified - NOTE has been removed; “ISPs” has been replaced with “(standardized) profiles”.]
3.23
บันทึก
เอกสาร (3.8) ที่ระบุผลลัพธ์ที่ได้รับหรือให้หลักฐานของกิจกรรมที่ดำเนินการ
[SOURCE: ISO 9000:2015, 3.8.10, modified — Notes 1 and 2 to entry have been removed.]
A Service Delivery policy, with information security element(s) shall be cre-
ated, documented, implemented and reviewed based on the defined scope of
the service delivery activities.| A Service Delivery policy, with information security element(s) shall be cre- |
| :--- |
| ated, documented, implemented and reviewed based on the defined scope of |
| the service delivery activities. |
Responsibilities and authorities which support the Service Delivery policy, shall
be assigned, monitored and managed.| Responsibilities and authorities which support the Service Delivery policy, shall |
| :--- |
| be assigned, monitored and managed. |
The Service Manager shall review and report to management on actions and
achievements against Service Delivery objectives and update plans to achieve
the objectives.| The Service Manager shall review and report to management on actions and |
| :--- |
| achievements against Service Delivery objectives and update plans to achieve |
| the objectives. |
Top management shall review policies, processes, procedures and services to
confirm compliance and continued relevance to meet changing circumstances
or customer requirements.| Top management shall review policies, processes, procedures and services to |
| :--- |
| confirm compliance and continued relevance to meet changing circumstances |
| or customer requirements. |
"Profile
conformance" Profile requirement (reqr.) text "Profile
reqr. ID"
M (shall) Top management shall define the scope of the service delivery activities. P01
M (shall) "A Service Delivery policy, with information security element(s) shall be cre-
ated, documented, implemented and reviewed based on the defined scope of
the service delivery activities." P02
M (shall) "Responsibilities and authorities which support the Service Delivery policy, shall
be assigned, monitored and managed." P03
M (shall) "The Service Manager shall review and report to management on actions and
achievements against Service Delivery objectives and update plans to achieve
the objectives." P04
M (shall) "Top management shall review policies, processes, procedures and services to
confirm compliance and continued relevance to meet changing circumstances
or customer requirements." P05
NOTE The source of these requirements can be found in Table A.1. | Profile <br> conformance | Profile requirement (reqr.) text | Profile <br> reqr. ID |
| :---: | :--- | :---: |
| M (shall) | Top management shall define the scope of the service delivery activities. | P01 |
| M (shall) | A Service Delivery policy, with information security element(s) shall be cre- <br> ated, documented, implemented and reviewed based on the defined scope of <br> the service delivery activities. | P02 |
| M (shall) | Responsibilities and authorities which support the Service Delivery policy, shall <br> be assigned, monitored and managed. | P03 |
| M (shall) | The Service Manager shall review and report to management on actions and <br> achievements against Service Delivery objectives and update plans to achieve <br> the objectives. | P04 |
| M (shall) | Top management shall review policies, processes, procedures and services to <br> confirm compliance and continued relevance to meet changing circumstances <br> or customer requirements. | P05 |
| NOTE The source of these requirements can be found in Table A.1. | | |
The Control Manager shall evaluate service changes for approval or rejection
based on established criteria and update the service change schedule.| The Control Manager shall evaluate service changes for approval or rejection |
| :--- |
| based on established criteria and update the service change schedule. |
Service designs shall conform to documented design, build, test and deploy-
ment procedures.| Service designs shall conform to documented design, build, test and deploy- |
| :--- |
| ment procedures. |
Master copies of authorized service components (e.g., hardware, software,
documentation, etc.) shall be available and protected.| Master copies of authorized service components (e.g., hardware, software, |
| :--- |
| documentation, etc.) shall be available and protected. |
The Control Manager shall approve or reject the deployment of a service change
based on test results compared to acceptance criteria, customer agreement and
service change schedule.| The Control Manager shall approve or reject the deployment of a service change |
| :--- |
| based on test results compared to acceptance criteria, customer agreement and |
| service change schedule. |
"Profile
conformance" Profile requirement (reqr.) text "Profile
reqr. ID"
M (shall) Management shall define services and control the service component information. P06
M (shall) "The Control Manager shall evaluate service changes for approval or rejection
based on established criteria and update the service change schedule." P07
M (shall) "Service designs shall conform to documented design, build, test and deploy-
ment procedures." P08
M (shall) "Master copies of authorized service components (e.g., hardware, software,
documentation, etc.) shall be available and protected." P09
M (shall) "The Control Manager shall approve or reject the deployment of a service change
based on test results compared to acceptance criteria, customer agreement and
service change schedule." P10
NOTE The source of these requirements can be found in Table A.1. | Profile <br> conformance | Profile requirement (reqr.) text | Profile <br> reqr. ID |
| :---: | :--- | :---: |
| M (shall) | Management shall define services and control the service component information. | P06 |
| M (shall) | The Control Manager shall evaluate service changes for approval or rejection <br> based on established criteria and update the service change schedule. | P07 |
| M (shall) | Service designs shall conform to documented design, build, test and deploy- <br> ment procedures. | P08 |
| M (shall) | Master copies of authorized service components (e.g., hardware, software, <br> documentation, etc.) shall be available and protected. | P09 |
| M (shall) | The Control Manager shall approve or reject the deployment of a service change <br> based on test results compared to acceptance criteria, customer agreement and <br> service change schedule. | P10 |
| NOTE The source of these requirements can be found in Table A.1. | | |
All services offered shall be documented in business terms in one or more
service catalogue(s) and made available to appropriate stakeholder groups.| All services offered shall be documented in business terms in one or more |
| :--- |
| service catalogue(s) and made available to appropriate stakeholder groups. |
P11
M (shall)
ข้อกำหนดสำหรับการให้บริการระหว่าง VSE และลูกค้าและ/หรือผู้จัดจำหน่ายจะต้องได้รับการตกลง บันทึก ตรวจสอบ และปรับปรุงตามความจำเป็น
Requirements for service delivery between the VSE and its customer(s) and/or
supplier(s) shall be agreed, documented, reviewed and updated, as required.| Requirements for service delivery between the VSE and its customer(s) and/or |
| :--- |
| supplier(s) shall be agreed, documented, reviewed and updated, as required. |
At a minimum, service reports to customers or from suppliers shall be pro-
duced for customer satisfaction, service complaints and performance against
agreed service measures.| At a minimum, service reports to customers or from suppliers shall be pro- |
| :--- |
| duced for customer satisfaction, service complaints and performance against |
| agreed service measures. |
P13
"Profile
conformance" Profile requirement (reqr.) text "Profile
reqr. ID"
M (shall) "All services offered shall be documented in business terms in one or more
service catalogue(s) and made available to appropriate stakeholder groups." P11
M (shall) "Requirements for service delivery between the VSE and its customer(s) and/or
supplier(s) shall be agreed, documented, reviewed and updated, as required." P12
M (shall) "At a minimum, service reports to customers or from suppliers shall be pro-
duced for customer satisfaction, service complaints and performance against
agreed service measures." P13| Profile <br> conformance | Profile requirement (reqr.) text | Profile <br> reqr. ID |
| :---: | :--- | :---: |
| M (shall) | All services offered shall be documented in business terms in one or more <br> service catalogue(s) and made available to appropriate stakeholder groups. | P11 |
| M (shall) | Requirements for service delivery between the VSE and its customer(s) and/or <br> supplier(s) shall be agreed, documented, reviewed and updated, as required. | P12 |
| M (shall) | At a minimum, service reports to customers or from suppliers shall be pro- <br> duced for customer satisfaction, service complaints and performance against <br> agreed service measures. | P13 |
All reported or identified incidents that reduce the quality of or prevent use of
agreed services shall be recorded and managed to closure.| All reported or identified incidents that reduce the quality of or prevent use of |
| :--- |
| agreed services shall be recorded and managed to closure. |
P14
M (shall)
ทรัพยากรที่มีทักษะ ทั้งภายในหรือภายนอก VSE จะต้องตรวจสอบเหตุการณ์ที่เกิดขึ้นหรือที่อาจเกิดขึ้น โดยมีเจตนาในการฟื้นฟูบริการให้เร็วที่สุดเท่าที่จะเป็นไปได้。
Skilled resources, internal or external to the VSE, shall investigate incidents, actual
or potential, with the intent of restoring service as soon as possible.| Skilled resources, internal or external to the VSE, shall investigate incidents, actual |
| :--- |
| or potential, with the intent of restoring service as soon as possible. |
Incidents, actual or potential, with a significant impact on the organization shall
be investigated to discover root cause and a solution which will be actioned, if
approved, to prevent or minimize future occurrence.| Incidents, actual or potential, with a significant impact on the organization shall |
| :--- |
| be investigated to discover root cause and a solution which will be actioned, if |
| approved, to prevent or minimize future occurrence. |
P17
"Profile
conformance" Profile requirement (reqr.) text "Profile
reqr. ID"
M (shall) "All reported or identified incidents that reduce the quality of or prevent use of
agreed services shall be recorded and managed to closure." P14
M (shall) "Skilled resources, internal or external to the VSE, shall investigate incidents, actual
or potential, with the intent of restoring service as soon as possible." P15
M (shall) All steps taken to restore the service shall be documented and agreed. P16
M (shall) "Incidents, actual or potential, with a significant impact on the organization shall
be investigated to discover root cause and a solution which will be actioned, if
approved, to prevent or minimize future occurrence." P17| Profile <br> conformance | Profile requirement (reqr.) text | Profile <br> reqr. ID |
| :---: | :--- | :---: |
| M (shall) | All reported or identified incidents that reduce the quality of or prevent use of <br> agreed services shall be recorded and managed to closure. | P14 |
| M (shall) | Skilled resources, internal or external to the VSE, shall investigate incidents, actual <br> or potential, with the intent of restoring service as soon as possible. | P15 |
| M (shall) | All steps taken to restore the service shall be documented and agreed. | P16 |
| M (shall) | Incidents, actual or potential, with a significant impact on the organization shall <br> be investigated to discover root cause and a solution which will be actioned, if <br> approved, to prevent or minimize future occurrence. | P17 |
At a minimum, a current copy of the business
goals and objectives shall be readily available| At a minimum, a current copy of the business |
| :--- |
| goals and objectives shall be readily available |
At a minimum, the customer experience ap-
proach shall:
a) {fa7239d16-1f44-455a-9c52-d6bc1cb13ffe}Capture and manage a log for all,comments (compliments, complaints,,general comments)| At a minimum, the customer experience ap- |
| :--- |
| proach shall: |
| a) {fa7239d16-1f44-455a-9c52-d6bc1cb13ffe}Capture and manage a log for all <br> comments (compliments, complaints, <br> general comments) |
WP.05
ขั้นตอนการจัดการข้อมูลและเอกสาร
Data and
document
management
procedure| Data and |
| :--- |
| document |
| management |
| procedure |
อย่างน้อยจะต้องรวมถึงสิ่งต่อไปนี้:
At a minimum, the following shall be in-
cluded:| At a minimum, the following shall be in- |
| :--- |
| cluded: |
M (shall)
รหัสประจำตัวที่ไม่ซ้ำกัน
b) เวอร์ชันของเอกสารหรือข้อมูล
c) การควบคุมเพื่อป้องกันการเข้าถึงที่ไม่ได้รับอนุญาต
Base std ID & ref. WP No. WP name WP content requirements Profile conf.
"ISO/IEC/
IEEE 15289:2017" WP.01 "Business goals
and objectives" "At a minimum, a current copy of the business
goals and objectives shall be readily available" M (shall)
WP.04 "Customer
experience
approach" "At a minimum, the customer experience ap-
proach shall:
a) {fa7239d16-1f44-455a-9c52-d6bc1cb13ffe}Capture and manage a log for all,comments (compliments, complaints,,general comments)" WP.05
"Data and
document
management
procedure" "At a minimum, the following shall be in-
cluded:" M (shall)
a) Unique identifier
b) Version of the document or data
c) Controls to prevent unauthorized | Base std ID & ref. | WP No. | WP name | WP content requirements | Profile conf. |
| :--- | :---: | :--- | :--- | :---: |
| ISO/IEC/ <br> IEEE 15289:2017 | WP.01 | Business goals <br> and objectives | At a minimum, a current copy of the business <br> goals and objectives shall be readily available | M (shall) |
| | WP.04 | Customer <br> experience <br> approach | At a minimum, the customer experience ap- <br> proach shall: <br> a) {fa7239d16-1f44-455a-9c52-d6bc1cb13ffe}Capture and manage a log for all <br> comments (compliments, complaints, <br> general comments) | WP.05 |
| | Data and <br> document <br> management <br> procedure | At a minimum, the following shall be in- <br> cluded: | M (shall) | |
| a) Unique identifier | | | | |
| b) Version of the document or data | | | | |
| c) Controls to prevent unauthorized | | | | |
อย่างน้อยที่สุด บันทึกจะต้อง: a) ถูกเก็บเป็นรายการการกำหนดค่า (CI) b) ถูกจัดการตามความต้องการทางธุรกิจ c) มี:
At a minimum, the log shall:
a) Be stored as a configuration item (CI)
b) Be managed, as determined by business need
c) Contain:| At a minimum, the log shall: |
| :--- |
| a) Be stored as a configuration item (CI) |
| b) Be managed, as determined by business need |
| c) Contain: |
Base std ID & ref. WP No. WP name WP content requirements Profile conf.
"ISO/
IEC 20000:2017 " - "7.1" WP. 06 Feedback log "At a minimum, the log shall:
a) Be stored as a configuration item (CI)
b) Be managed, as determined by business need
c) Contain:" M (shall)
1) Unique identifier
2) Contact Details (Full name, address, phone numbers; email address)
3) Description and detail of the comment
4) Time and date of the interaction
5) Investigation outcome
6) Signature and date | Base std ID & ref. | WP No. | WP name | WP content requirements | Profile conf. |
| :---: | :---: | :---: | :---: | :---: |
| ISO/ <br> IEC 20000:2017 $\text { - } 7.1$ | WP. 06 | Feedback log | At a minimum, the log shall: <br> a) Be stored as a configuration item (CI) <br> b) Be managed, as determined by business need <br> c) Contain: | M (shall) |
| | | | | |
| | | | | |
| | | | | |
| | | | 1) Unique identifier | |
| | | | 2) Contact Details (Full name, address, phone numbers; email address) | |
| | | | 3) Description and detail of the comment | |
| | | | 4) Time and date of the interaction | |
| | | | 5) Investigation outcome | |
| | | | 6) Signature and date | |