1. IT organization planning structure chart
1.1 IT organizational structure
1.2 Organizational responsibilities
| organize | |
| Information Technology Governance Office | ITGO |
| Project Management Office | PMO |
| Business Process Management Office | BPMO |
| IT Information Security Office (Safety Security Office) | SSO |
| Change Control Board | CCB |
| Root Cause Management Committee | RCMC |
| Application Systems Solution Center (Application Systems Solution Center) Marketing + Marketing System | R&D | Supply Chain | Intelligent Manufacturing | Finance | Public Domain |
ASO |
| Development Center | DEVC |
| IT Infrastructure Center | IN |
| IT Consulting Service Desk | ICS |
| IT Emerging Technology Acquisition, Research and Application Group （IT Emerging Technologies Acquisition, Research, and Application Group） |
EAGER |
1.3 Guiding ideology
1.3.1 IT service assurance echelon and guiding ideology
2. Overall business planning structure diagram
2.1 Business process
In the traditional sense, we often talk about flow: logistics, people flow, financial flow, and information flow; some people also divide it into three parts: strategic process, operational process, and personnel process, which respectively solve the direction of the enterprise-what to do and how to do it. , who will do it; then understanding enterprise processes from an IT perspective can also be divided into: value process , enabling process , and support process
2.1.1 Value process
a Market-to-lead process to solve corporate order problems
b From demand to product, that is, the R&D system process solves the problem of products from 0 to 1
c Engineering to manufacturing process, solving products from 1 to 100
d After-sales service to customer process to solve order repurchase issues
2.1.2 Enabling process
a Strategy to execution process
b Supply chain management process
2.1.3 Support process
a Problem-to-solution process
b Corporate governance process
c Human resources related processes
d Processes related to the financial field
3. Digital project planning architecture diagram
4. Application system integration architecture diagram
5. Accessories
1.2 Organizational responsibilities
1.2.1 ITGO, Information Technology Governance Office
IT Strategic Planning : Responsible for assisting in developing the organization's IT strategy and ensuring that the strategy is aligned with the organization's business goals and needs . This includes identifying and planning IT projects , investments and resource allocation.
IT Governance Framework: Responsible for establishing and maintaining an appropriate IT governance framework to ensure IT resources and decisions comply with regulations, policies and best practices. This includes developing IT policies, processes and procedures .
Risk Management: Identify, assess and manage IT-related risks, including security risks, compliance risks and operational risks . They are also responsible for ensuring that the organization takes appropriate steps to mitigate these risks.
IT Project Management: Participate in the planning, execution and supervision of IT projects to ensure projects are completed according to budget and schedule and achieve business goals.
Performance Monitoring and Measurement: Responsible for developing and maintaining IT performance indicators and metrics to measure the quality, reliability and efficiency of IT services and provide reports to management.
Resource Management: ITGO assists in managing IT resources, including hardware, software, personnel and budget. Ensure resources are used efficiently and make adjustments when needed.
Compliance and compliance: Ensure IT activities and decisions comply with applicable regulations, industry standards and compliance requirements . Conduct compliance audits and reporting.
Technical standards and best practices: Develop and promote technical standards and best practices to ensure that the organization's IT environment is secure, stable and consistent.
Supplier Management: Responsible for contract management and relationship management with suppliers and partners to ensure contract performance and value delivery.
Communication and Education: Maintain communication with all levels of management and business units to provide information and education on IT decisions and activities.
1.2.2 PMO, Project Management Office
Ensure the successful delivery of IT projects by developing standardized project management methods and processes, providing support and guidance to ensure projects meet targets in terms of time, budget and quality . This helps organizations effectively manage project portfolios, reduce project risks, and maximize the value of IT projects
Project Management Processes and Standards: Develop and maintain project management processes, methodologies and best practices to ensure projects are managed to consistent standards.
Project Planning and Execution: Assist project managers and project teams in planning, executing and monitoring projects to ensure the achievement of project goals.
Project Scope Management: Helps define the scope, goals, and deliverables of the project to ensure that the project meets business needs.
Project Time Management: Develop project schedules, timelines and critical paths , monitor project progress and identify potential delays.
Project cost management: Track project costs, budgets, and resource allocations to ensure projects are financially controllable.
Project risk management: Identify, assess and manage project risks , and take measures to reduce the impact of risks on the project.
Project Quality Management: Ensures that project deliverables comply with quality standards and the organization's quality policy.
Project Resource Management: Assists with resource allocation and management to meet project needs.
Project Communications and Reporting: Assist the project manager and team in communicating with stakeholders and reporting regularly on project progress and issues.
Project Document Management: Maintain project documents and materials to ensure traceability and knowledge management .
Project Assessments and Reviews: Conducts project assessments and reviews, providing feedback and recommendations to improve the project management process.
Resource training and development: Provide project management training and support to help project managers and teams continuously improve their capabilities.
Project Portfolio Management: Assists in evaluating, selecting and prioritizing a portfolio of projects to ensure projects are aligned with strategic objectives .
Benefit tracking and value management: Track the value and benefits delivered by the project to ensure that the project generates the expected business value.
Continuous Improvement: Regularly review the project management process to identify opportunities for improvement and drive continuous improvement of project management practices.
1.2.3 BPMO, Business Process Management Office
Responsible for coordinating, supervising and improving the business process team so that the organization's business processes can run in an efficient, sustainable and compliant manner, and constantly seeking improvement opportunities to improve the organization's performance and competitiveness.
Process Design and Modeling: Responsible for working with various business units to identify, design and model the organization's core business processes. Understand business needs, plan processes, draw process diagrams and identify key process performance indicators.
Process Optimization and Improvement: Continuously optimize and improve existing business processes to increase efficiency, reduce costs, reduce risks and increase customer satisfaction. Including process automation and standardization .
Process Oversight and Management : Oversee the execution of business processes to ensure they are performed in a prescribed manner. Includes monitoring process performance, reporting process issues and taking corrective action.
Technical Support and Tools: Provides technical support and tools to help business units better manage and improve their processes. Process management software, automation tools and training.
Continuous improvement culture: Promote and cultivate a continuous improvement culture within the organization, encourage employees to propose process improvement suggestions , and ensure that these suggestions are reviewed and implemented.
Process Measurement and Reporting: Responsible for developing and maintaining metrics and dashboards for measuring and reporting process performance to help management understand the efficiency and effectiveness of processes.
Project Management and Coordination: Coordinates various activities related to process improvement projects, including project planning, resource allocation, progress tracking, and project delivery.
Risk Management: Helps organizations identify risks associated with business processes and take steps to mitigate these risks to ensure the robustness of the business.
1.2.4 SSO, IT Information Security Office (Safety Security Office)
Security Strategy and Policy Development: The IT Security Office is responsible for developing and maintaining the organization's information security strategies, policies, and standards. Includes guidelines on access control, data protection, password management, network security, etc.
Security Risk Management: The office is responsible for identifying, assessing and managing risks related to information security. This includes monitoring and responding to system vulnerabilities, threats, vulnerabilities and malicious activity.
Security Compliance: Ensures the organization adheres to regulations, industry standards and internal compliance requirements to protect sensitive data and information.
Security training and education: Provide information security training and education to employees and relevant stakeholders to enhance their security awareness and skills.
Security Awareness Program: Conduct security awareness and awareness campaigns to increase information security awareness among everyone within the organization.
Security incident response and management: Establish and implement a security incident response plan to handle security incidents such as security incidents, data leaks, or cyberattacks.
Access control and identity management: Ensure that only authorized personnel have access to sensitive data and systems by implementing authentication, access control and permissions management.
Data Protection and Encryption: Protect sensitive data and adopt encryption measures to ensure that data is protected from unauthorized access during transmission and storage.
Security technology deployment: Select, implement and maintain security technologies and tools, such as firewalls, intrusion detection systems, security information and event management systems, etc.
Security Audits and Compliance Checks: Conduct security audits to assess the compliance of information systems and processes and take corrective actions to address identified issues.
Malicious activity monitoring: Monitoring and analyzing unusual activities in networks and systems to detect and respond to potential threats.
Security Documentation and Records Management: Ensures appropriate records and documentation, such as the management and retention of security policies, security event logs, and security reports.
1.2.5 CCB, Change Control Board (Change Control Board)
Ensure IT changes are appropriately managed and overseen to maintain the stability, reliability and security of IT systems and applications
Change review and approval: Responsible for reviewing submitted IT change requests, including software updates, configuration changes, hardware upgrades, etc. Decide whether to approve these changes to ensure they do not have a negative impact on the business .
Priority Management: Assigns priority to change requests based on the nature and urgency of the change. This helps ensure critical changes are processed in a timely manner.
Change Plans and Timetables: Assist in developing change plans and timetables to ensure changes are made at the appropriate time to minimize disruption to the business .
Risk assessment: Evaluate the risks that changes may bring, including system instability, data loss, security vulnerabilities, etc., and take measures to reduce these risks.
Resource allocation: Coordinate and allocate the people and resources required for the change to ensure that the change can be implemented effectively.
Change notifications and communications: Ensure change-related communications and notifications are handled appropriately within and outside the organization, including business units, users, and stakeholders .
Change documentation and records management: Record the details of all change decisions, approvals and implementations to ensure transparency and traceability of change history .
Post-change evaluation: A post-change evaluation is required to ensure that the changes have been successfully implemented and have achieved the desired results.
Emergency change management: Respond quickly to changes that need to be made immediately in emergency situations to ensure that changes are handled appropriately while minimizing business risks.
Best Practices and Process Improvement: Help develop and improve change management processes and best practices to ensure change management consistency and efficiency.
1.2.6 RCMC, Root Cause Management Committee
The primary responsibility of the Root Cause Management Board is to ensure that when an organization faces problems and incidents, it can analyze them deeply, find the root causes , and take steps to prevent similar problems from happening in the future.
Problem analysis: The root cause management committee is responsible for in-depth analysis of problems and events that occur within the organization, including accidents, failures, quality issues, safety incidents, etc.
Root cause identification: Determining the root cause of a problem, not just the superficial causes or symptoms. Conduct detailed surveys and data analysis.
Corrective Action Development: Develop corrective actions to resolve the problem. Eliminate the root cause.
Control Measure Development: Develop control measures to ensure the problem does not reoccur. Develop new processes, policies, training programs.
Action plan management: Develop and manage action plans for implementing corrective actions and control measures to ensure they are executed as planned.
Priority Management: Prioritize and manage issues based on their severity and urgency.
Communication and Reporting: Inform relevant stakeholders, including management, employees, and external partners, of issues and resolution progress to ensure transparency and collaboration.
Continuous Improvement: Promote a culture of continuous improvement in your organization with root cause analysis. Develop best practices to prevent future problems from occurring.
Data and Lessons Learned: Provides recommendations and training on how to avoid similar issues based on their root causes and resolution experience.
1.2.7 ASO, Application Systems Solution Center
A department or team responsible for providing information technology solutions to different areas. The main responsibility is to assist departments and teams in different business areas to implement and maintain IT solutions to meet business needs and support the strategic goals of the organization .
Market + marketing system:
Marketing departments collaborate to develop and maintain marketing automation tools and systems to increase the efficiency and effectiveness of marketing campaigns .
Support market analysis and data mining to provide insights into market trends and customer behavior.
Optimize customer relationship management ( CRM ) systems to improve customer experience and relationship management.
R&D areas:
PLM/RDM R&D Management System
Supply chain area:
Develop and maintain supply chain management systems ( SCM/SRM/WMS/TMS ) to improve supply chain visibility, collaboration and efficiency.
Implement Internet of Things (IoT) and IoT sensor technologies to monitor and optimize supply chain operations.
Support supply chain analysis and optimization to reduce costs and improve delivery performance.
Intelligent manufacturing field:
Deploy factory automation and smart manufacturing systems to improve production efficiency and quality
Develop and integrate production line data collection and analysis solutions to support intelligent decision-making
Manage the manufacturing execution system ( MES ) and production planning and scheduling system to ensure the implementation of the production plan
Financial field:
Manage financial systems and accounting software ( ERP/TR ) to support financial reporting, budgeting and cost control.
Develop and maintain financial data analysis and forecasting tools to provide financial insights.
Support electronic payments and financial risk management to ensure financial security.
public area:
OA office automation system
HR human resources management system
1.2.8 DEVC, Software Development Center (Development Center)
The Development Center is responsible for software development and application development. Responsibilities span the entire software development life cycle, from requirements analysis and design to coding, testing, deployment, and maintenance.
Requirements analysis: Cooperate with business departments to collect, understand and analyze user requirements, and determine the functions and specifications of the project.
System design: Develop system architecture and design plans, including database design, system component and module design.
Software Coding : Developing source code for software applications, using appropriate programming languages and development tools.
Quality Assurance and Testing: Develop test plans and test cases, perform functional testing, integration testing and performance testing to ensure software quality and stability.
Version Control: A version control system that manages and maintains source code to facilitate collaborative development and code management.
Troubleshooting and Repair: Analyze and resolve glitches and errors in software to ensure the normal operation of the application.
Security considerations: Ensure that software development follows best security practices, including security measures in data encryption, authentication, and authorization.
Deployment and Integration: Assist in deploying new software versions into production environments and ensure smooth integration with other systems.
Documentation: Write and maintain relevant technical documentation, including user manuals, development documentation, and system documentation.
Performance Optimization: Analyze and improve application performance to ensure fast response times and resource utilization.
Change Management: Manage software change requests and version releases, ensuring all changes are tracked and recorded.
Continuous Integration and Delivery: Implement continuous integration and continuous delivery processes to accelerate software development and delivery cycles.
Teamwork: Work closely with other departments and teams to ensure software development is aligned with business needs.
1.2.9 ITI, IT Infrastructure Center (IT Infrastructure)
IT Infrastructure Center (IT Infrastructure) is a department or team within an organization responsible for managing and maintaining information technology infrastructure. IT infrastructure is the foundation of an organization's IT ecosystem, including hardware, software, networks, data centers and cloud infrastructure, etc., supporting the normal operation of business operations and applications.
Hardware management: The IT infrastructure center is responsible for selecting, purchasing, installing, configuring and maintaining hardware resources such as servers, storage devices, network equipment and terminal equipment.
Software management: Manage and maintain operating systems, databases, applications and other software resources, including software installation, upgrades, patch management and license management.
Network Management: Manages and maintains the network infrastructure within an organization, including local area networks (LANs), wide area networks (WANs), wireless networks, and Internet connections.
Data center management: Responsible for data center operations, including server hosting, data storage, cooling, power supply and physical security.
Cloud infrastructure management: If your organization uses cloud services, an IT infrastructure center may be responsible for managing and monitoring the cloud infrastructure to ensure its performance and availability.
Security management: Ensure infrastructure security, including access control, authentication, firewalls, intrusion detection, and data encryption.
Capacity planning: Monitor infrastructure resource usage and perform capacity planning to ensure sufficient resources are available to support business needs.
Performance Monitoring: Monitor the performance of infrastructure components in real-time to identify and resolve performance issues and ensure high availability of business applications.
Troubleshooting and Repair: Responsible for diagnosing and resolving infrastructure failures to ensure system stability and reliability.
Technical Support: Provide technical support to employees and users regarding infrastructure usage and troubleshooting.
Cost management: Control and optimize infrastructure-related costs, including hardware, software licenses, maintenance contracts, and energy costs.
Project Support: Provide infrastructure support and consultation to project teams during the planning and execution of new projects.
Compliance and compliance: Ensure that infrastructure is operated and managed in compliance with applicable regulations, compliance requirements and security standards.
Technology planning: Align with IT strategy to plan long-term infrastructure development path, including technology upgrades and replacement plans.
Disaster recovery and business continuity: Develop and implement a disaster recovery plan to ensure business continuity in the event of an emergency.
1.2.10 ICS, IT Consulting Service Desk
An IT Consulting Service Desk is a department or team that provides information technology consulting and support, usually located within an organization, to help employees and users solve IT-related problems and challenges. Its main responsibilities include the following:
Technical Support: Provides support and solutions to employees and users regarding computer hardware, software, networks, applications and other IT-related issues.
Problem Solving: Help diagnose and resolve IT issues, including troubleshooting, error messages, application issues, hardware failures, etc.
Issue logging and tracking: Log all issues and support requests raised to track the progress of the issue and ensure it is resolved in a timely manner.
User training and guidance: Provide employees with training and guidance on the use of IT to help them make better use of technology resources.
Software Installation and Upgrades : Assists users in installing, configuring, and updating software applications to ensure they operate according to best practices.
Hardware Support : Provides support for hardware issues, including computers, printers, network equipment, and mobile devices.
Software Support: Answer questions about operating systems, office software, email clients, and other applications.
Remote support: Assist users to solve problems remotely, and control or guide users to complete necessary operations through remote control.
Service request management: Assist users to submit IT service requests, such as account creation, access authorization, equipment acquisition, etc.
Communications and Coordination: Coordinate problem resolution with other IT teams and departments to ensure issues are handled in a timely manner.
Maintain knowledge base: Establish and maintain a knowledge base of solutions to IT problems for employees and users to find self-service solutions.
User Satisfaction: Regularly collect user feedback to improve support services and increase user satisfaction.
1.2.11 ITARA, IT Emerging Technology Acquisition, Research and Application Group
The IT Emerging Technology Acquisition, Research, and Application Group is a team responsible for tracking, evaluating, and applying emerging technologies to ensure that organizations can take full advantage of the latest technology trends and innovations. The main responsibilities of this group include the following:
Technology monitoring and assessment: Track emerging technologies and trends, including artificial intelligence (AI), blockchain, Internet of Things (IoT), cloud computing, big data, virtual reality (VR) and augmented reality (AR), etc. Regularly evaluate the potential value and suitability of these technologies.
Technology Research and Experimentation: Conduct in-depth technology research, including exploring how emerging technologies work, application scenarios, advantages, and limitations. Experiments and prototype development may be conducted to demonstrate the feasibility of the technology.
Technology strategy development: Develop IT emerging technology adoption strategies to determine which new technologies are most valuable to the organization's business goals and needs, and how to integrate and apply these technologies.
Technology collaboration and partnerships: Connect with external technology providers, partners and research institutions to obtain the latest information and support on emerging technologies.
Technology training and education: Provide internal training and education to help employees understand and master emerging technologies and ensure their correct application in work.
Proof of concept and prototype development: Provide proof of concept and prototype development support to business units to help them understand how emerging technologies can be applied in real business.
Technology Selection and Procurement: Assists organizations in selecting and procuring hardware, software and services related to emerging technologies, ensuring selections meet organizational needs and budgets.
Security and Compliance: Ensure that the application and integration of emerging technologies comply with information security and regulatory compliance requirements and take appropriate measures to protect sensitive data and systems.
Technology Governance: Develop and enforce governance frameworks for IT emerging technologies to ensure transparency and consistency in technology adoption and application.
Business value assessment: Regularly assess the impact and value of emerging technology applications to the business to determine whether adoption strategies need to be adjusted or technology changes need to be made.
Technology Dissemination and Communication: Communicates information about emerging technologies, including their potential impact and value, to management and business units.
Technological innovation culture: Promote a technological innovation culture within the organization and encourage employees to propose ideas and suggestions for the application of emerging technologies.