臺灣博碩士論文加值系統

隨著產業環境的不斷變遷，企業面臨經濟與科技的激烈競爭下，紛紛針對不同的核心業務，分別導入各項核心領域的國際標準，例如：ISO9001、ISO27001及BS10012等。企業在推動各項管理系統時，容易忽略各項管理制度的整合，而造成事權不統一，作業沒有效率，形成資源上的浪費。
本研究主要目的是在探討ISO9001、ISO27001及BS10012三種國際標準之異同；探討企業在同時導入這些管理系統時，如何進行整合管理；並探討企業在實施整合管理時，可以獲得的效益與可能面臨的問題。
本研究採用內容分析法以分析前述三種國際標準之異同，發展出類目表；接著採用焦點團體法將選定之人員依照類目表進行討論，並將討論結果進行統整；然後，採用專家訪談法針對前述統整結果進行意見諮詢與修正；最後將資料整合進行信效度分析。
本研究結果顯示三種不同的管理系統可以產生出某些共通的作業流程，例如管理審查、內部稽核、文件及紀錄管制…等等。藉由這些共通作業流程的整合管理，對企業運作上將可獲得提昇管理效益之目的，減少管理資源上的浪費，以降低管理成本。本研究成果可以提供給未推行或已推行之企業組織作為參考，以順利建置與維持管理系統之運作，進而提昇系統整合管理之效益。

With the ever-changing industry environment, companies facing fierce economic and technology competition have deployed certain management systems, such as ISO9001, ISO27001 and BS10012, for different core business. While carrying out the enterprise management systems, it is easy to overlook the integration of the management systems, resulting in inconsistent authority, non-efficiency, and waste of resources.
The main purpose of this study was to investigate the similarities and differences of international standards, ISO9001、ISO27001 and BS10012; explore the enterprise deploying three of these management systems how to carry out integrated management; and explore the potential benefits and problems in implementation of integrated management.
This study used content analysis to analyze the similarities and differences between the aforementioned three international standards, and developed a category list; and then we used focus group method to discuss in accordance with the category list. After that we used expert interviews to obtain consultation and amendments. Finally, the reliability and validity had been analyzed.
The findings show that these three management systems would contain some common operation processes, such as management review, internal audit, documentations and records control, etc. With the integrated management of these common operation processes, enterprise would obtain the enhancement of efficiency, decrease waste of resources, and reduce management costs. The findings of this study would provide an important reference for enterprises in their future practices of the implementation and maintenance of management systems, and would enhance the effectiveness of their integrated management.

摘　　要 ..................................................i
Abstract.................................................ii
誌　　謝................................................iii
目　　錄................................................ .iv
表目錄...................................................vi
圖目錄..................................................vii
第一章　緒論..............................................1
1.1 研究背景與動機........................................1
1.2 研究目的..............................................2
1.3 研究流程..............................................3
1.4 論文架構..............................................4
第二章　文獻探討..........................................5
2.1 國際標準組織........ ..................................5
2.2 品質基本概念..........................................6
2.3 資訊安全管理系統.....................................10
2.4 個資保護系統 .........................................14
2.4.1 經濟合作暨發展組織.................................16
2.4.2 亞太經濟合作會議...................................18
第三章　研究方法.........................................20
3.1 研究步驟.............................................20
3.2 內容分析法...........................................21
3.2.1 內容分析法步驟.....................................21
3.2.2 內容分析法工具.....................................22
3.3 焦點團體法...........................................22
3.3.1 焦點團體對象.......................................24
3.4 專家訪談法...........................................25
3.4.1 專家訪談對象.......................................26
第四章　資料分析.........................................27
4.1 內容分析法概念之分析.................................27
4.2 焦點團體法之實行.....................................29
4.3 專家訪談法之解析.....................................31
4.4 信效度分析...........................................34
4.4.1 本研究之信度分析...................................34
4.4.2 本研究之效度分析...................................36
4.5 小結.................................................39
第五章　結論.............................................42
5.1 研究結論.............................................42
5.2 管理意涵.............................................44
5.3 研究建議.............................................45
5.4 研究限制.............................................46
5.5 未來研究.............................................46

參考文獻.................................................48
一、中文部份.............................................48
二、英文部分.............................................49
三、網站部分.............................................50
附 錄.................................................51
附錄一　ISO 9001、ISO 27001與BS 10012條文對照表..........51
附錄二　ISO 9001、ISO 27001與BS 10012團體分析之類目表....55
附錄三　ISO 9001、ISO 27001與BS 10012團體分析統計表......59
附錄四 ISO 9001、ISO 27001與BS 10012專家訪談分析修正表..62
簡 歷.................................................66