{"id":411,"title":"Ba\u015far\u0131l\u0131 bir kurumsal BT y\u00f6netimi","content":"<div id=\"model-response-message-contentr_ad1031b7d92bce17\" class=\"markdown markdown-main-panel enable-luminous-fast-follows enable-updated-hr-color\" dir=\"ltr\" aria-busy=\"false\" aria-live=\"polite\">\n<p data-path-to-node=\"3\">H\u0131zla dijitalle\u015fen i\u015f d&uuml;nyas\u0131nda Bilgi Teknolojileri (BT) departmanlar\u0131, art\u0131k sadece teknik destek sa\u011flayan birimler olmaktan &ccedil;\u0131k\u0131p \u015firketlerin b&uuml;y&uuml;me motoru ve stratejik i\u015f orta\u011f\u0131 haline geldi. Peki; karma\u015f\u0131k altyap\u0131lar\u0131 y&ouml;netirken, siber tehditlerle m&uuml;cadele ederken ve b&uuml;t&ccedil;eyi optimize ederken s&uuml;rd&uuml;r&uuml;lebilir bir BT stratejisi nas\u0131l kurgulan\u0131r?<\/p>\n<p data-path-to-node=\"4\">Bu yaz\u0131da, kurumsal bir BT altyap\u0131s\u0131n\u0131 ba\u015far\u0131yla y&ouml;netmenin 6 temel s&uuml;tununu ele al\u0131yoruz.<\/p>\n<h2 data-path-to-node=\"6\">1. BT Stratejisini \u0130\u015f Hedefleriyle Hizalama ve Ba\u015far\u0131 KPI'lar\u0131<\/h2>\n<p data-path-to-node=\"7\">BT projelerinin ba\u015far\u0131s\u0131, ne kadar yeni teknoloji kullan\u0131ld\u0131\u011f\u0131yla de\u011fil, \u015firket hedeflerine ne kadar katk\u0131 sa\u011flad\u0131\u011f\u0131yla &ouml;l&ccedil;&uuml;l&uuml;r.<\/p>\n<ul data-path-to-node=\"8\">\n<li>\n<p data-path-to-node=\"8,0,0\"><strong data-path-to-node=\"8,0,0\" data-index-in-node=\"0\">\u0130\u015f Odakl\u0131 &Ouml;nceliklendirme:<\/strong> BT yat\u0131r\u0131mlar\u0131; gelir art\u0131\u015f\u0131, operasyonel verimlilik ve risk azaltma kriterleri g&ouml;z &ouml;n&uuml;ne al\u0131narak i\u015f birimleriyle ortak karar mekanizmalar\u0131yla planlanmal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,1,0\"><strong data-path-to-node=\"8,1,0\" data-index-in-node=\"0\">&Ouml;l&ccedil;&uuml;lebilir De\u011fer (KPI'lar):<\/strong> Stratejinin ba\u015far\u0131s\u0131; <strong data-path-to-node=\"8,1,0\" data-index-in-node=\"51\">%99.9+ sistem eri\u015filebilirli\u011fi (Uptime)<\/strong>, <strong data-path-to-node=\"8,1,0\" data-index-in-node=\"92\">SLA uyum oranlar\u0131<\/strong>, <strong data-path-to-node=\"8,1,0\" data-index-in-node=\"111\">d&uuml;\u015f&uuml;k MTTR (ortalama &ccedil;&ouml;z&uuml;m s&uuml;resi)<\/strong> ve b&uuml;t&ccedil;e sapma oranlar\u0131 gibi somut metriklerle s&uuml;rekli takip edilmelidir.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"10\">2. Siber G&uuml;venlik Risk Y&ouml;netimi, 24\/7 \u0130zleme ve Olay M&uuml;dahale<\/h2>\n<p data-path-to-node=\"11\">Siber g&uuml;venlik art\u0131k bir \"tercih\" de\u011fil, i\u015f s&uuml;reklili\u011finin ana \u015fart\u0131d\u0131r. G&uuml;venlik yakla\u015f\u0131m\u0131 reaktif de\u011fil, tamamen proaktif bir yap\u0131da kurgulanmal\u0131d\u0131r.<\/p>\n<ul data-path-to-node=\"12\">\n<li>\n<p data-path-to-node=\"12,0,0\"><strong data-path-to-node=\"12,0,0\" data-index-in-node=\"0\">S\u0131f\u0131r G&uuml;ven (Zero Trust):<\/strong> En az yetki ilkesi (<em data-path-to-node=\"12,0,0\" data-index-in-node=\"46\">Least Privilege<\/em>), &ccedil;ok fakt&ouml;rl&uuml; kimlik do\u011frulama (MFA) ve mikro-segmentasyon mimarinin merkezinde yer almal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"12,1,0\"><strong data-path-to-node=\"12,1,0\" data-index-in-node=\"0\">Proaktif \u0130zleme:<\/strong> SIEM, EDR ve katmanl\u0131 g&uuml;venlik &ccedil;&ouml;z&uuml;mleri (WAF, CrowdSec vb.) ile 7\/24 trafik izlenmeli, \u015f&uuml;pheli davran\u0131\u015flar an\u0131nda bloklanmal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"12,2,0\"><strong data-path-to-node=\"12,2,0\" data-index-in-node=\"0\">Olay M&uuml;dahale (Incident Response) Disiplini:<\/strong> Olas\u0131 bir tehdit an\u0131nda <em data-path-to-node=\"12,2,0\" data-index-in-node=\"69\">Tespit <span class=\"math-inline\" data-math=\"\\rightarrow\" data-index-in-node=\"76\">$\\rightarrow$<\/span> S\u0131n\u0131rlama (Containment) <span class=\"math-inline\" data-math=\"\\rightarrow\" data-index-in-node=\"112\">$\\rightarrow$<\/span> Temizleme <span class=\"math-inline\" data-math=\"\\rightarrow\" data-index-in-node=\"134\">$\\rightarrow$<\/span> Ders &Ccedil;\u0131karma (Post-Incident)<\/em> ad\u0131mlar\u0131 net bir prosed&uuml;re ba\u011fl\u0131 olarak y&uuml;r&uuml;t&uuml;lmelidir.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"14\">3. Bulut D&ouml;n&uuml;\u015f&uuml;m&uuml; ve Hibrit Mimari Dengesi<\/h2>\n<p data-path-to-node=\"15\">T&uuml;m sistemleri g&ouml;z&uuml; kapal\u0131 buluta ta\u015f\u0131mak kadar, tamamen geleneksel sunucularda kalmak da verimsizlik yarat\u0131r. Do\u011fru yakla\u015f\u0131m, <strong data-path-to-node=\"15\" data-index-in-node=\"127\">Hibrit Mimari<\/strong> ile denge kurmakt\u0131r.<\/p>\n<ul data-path-to-node=\"16\">\n<li>\n<p data-path-to-node=\"16,0,0\"><strong data-path-to-node=\"16,0,0\" data-index-in-node=\"0\">Do\u011fru Y&uuml;k, Do\u011fru Altyap\u0131:<\/strong> Hassas veriler ve yerel eri\u015fim gerektiren kritik sistemler kurum i&ccedil;i (On-Prem \/ Private Cloud) mimaride; anl\u0131k &ouml;l&ccedil;eklenme ve esneklik gerektiren y&uuml;kler ise Genel Bulut'ta (Public Cloud) tutulmal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"16,1,0\"><strong data-path-to-node=\"16,1,0\" data-index-in-node=\"0\">FinOps ve Maliyet Kontrol&uuml;:<\/strong> Kullan\u0131lmayan at\u0131l kaynaklar\u0131n otomasyonla kapat\u0131lmas\u0131, rezerve kaynak (Reserved Instance) kullan\u0131m\u0131 ve konteynerizasyon (Docker\/Kubernetes) ile performans art\u0131r\u0131l\u0131rken maliyetler optimize edilir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"16,2,0\"><strong data-path-to-node=\"16,2,0\" data-index-in-node=\"0\">G&uuml;venli Ba\u011flant\u0131:<\/strong> On-Premis ile bulut aras\u0131nda \u015fifreli IPSec VPN\/DirectConnect hatlar\u0131 kurulmal\u0131 ve merkezi IAM &ccedil;&ouml;z&uuml;mleriyle eri\u015fim s\u0131n\u0131rland\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"18\">4. B&uuml;t&ccedil;e, Tedarik&ccedil;i ve SLA Y&ouml;netimi<\/h2>\n<p data-path-to-node=\"19\">BT kaynaklar\u0131n\u0131 do\u011fru y&ouml;netmek, maliyetleri k\u0131smak de\u011fil; yap\u0131lan her harcaman\u0131n de\u011fer &uuml;retmesini sa\u011flamakt\u0131r.<\/p>\n<ul data-path-to-node=\"20\">\n<li>\n<p data-path-to-node=\"20,0,0\"><strong data-path-to-node=\"20,0,0\" data-index-in-node=\"0\">CAPEX - OPEX Dengesi:<\/strong> Donan\u0131m yat\u0131r\u0131mlar\u0131 (CAPEX) ile abonelik tabanl\u0131 yaz\u0131l\u0131m\/servis harcamalar\u0131 (OPEX) finansal stratejiye uygun \u015fekilde dengelenmelidir. Lisans envanterleri d&uuml;zenli taranarak at\u0131l lisans maliyetleri engellenmelidir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"20,1,0\"><strong data-path-to-node=\"20,1,0\" data-index-in-node=\"0\">SLA ve S&ouml;zle\u015fme Y&ouml;netimi:<\/strong> Tedarik&ccedil;i s&ouml;zle\u015fmelerine net m&uuml;dahale ve &ccedil;&ouml;z&uuml;m s&uuml;releri (RTO\/RPO) eklenmeli, SLA ihlallerinde cezai yapt\u0131r\u0131mlar a&ccedil;\u0131k&ccedil;a tan\u0131mlanmal\u0131d\u0131r. Tedarik&ccedil;iler d&uuml;zenli performans de\u011ferlendirmesine (<em data-path-to-node=\"20,1,0\" data-index-in-node=\"213\">Vendor Scorecard<\/em>) tabi tutulmal\u0131d\u0131r.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"22\">5. Felaket Kurtarma (DRP) ve \u0130\u015f S&uuml;reklili\u011fi (BCP)<\/h2>\n<p data-path-to-node=\"23\">Veri kayb\u0131 veya sistem kesintisi her an ya\u015fanabilir; &ouml;nemli olan buna ne kadar haz\u0131rl\u0131kl\u0131 oldu\u011funuzdur.<\/p>\n<ul data-path-to-node=\"24\">\n<li>\n<p data-path-to-node=\"24,0,0\"><strong data-path-to-node=\"24,0,0\" data-index-in-node=\"0\">RTO ve RPO Hedefleri:<\/strong> \u015eirketin ne kadar veri kayb\u0131na (RPO) ve ne kadarl\u0131k bir duru\u015f s&uuml;resine (RTO) dayanabilece\u011fi \u0130\u015f Etki Analizi (BIA) ile belirlenmelidir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"24,1,0\"><strong data-path-to-node=\"24,1,0\" data-index-in-node=\"0\">3-2-1 Yedekleme Stratejisi:<\/strong> Verinin 3 kopyas\u0131, 2 farkl\u0131 medyada ve en az 1 tanesi tamamen farkl\u0131 bir lokasyonda\/bulutta, fidye yaz\u0131l\u0131mlar\u0131na (Ransomware) kar\u015f\u0131 de\u011fi\u015ftirilemez (Immutable) olarak saklanmal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"24,2,0\"><strong data-path-to-node=\"24,2,0\" data-index-in-node=\"0\">Sim&uuml;lasyon ve Denetim:<\/strong> DR planlar\u0131 ka\u011f\u0131t &uuml;zerinde kalmamal\u0131; y\u0131lda en az iki kez ge&ccedil;i\u015f (Failover) testleri yap\u0131larak do\u011fruluklar\u0131 ve ISO 27001 \/ KVKK uyumluluklar\u0131 belgelenmelidir.<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"26\">6. Ekip Yap\u0131land\u0131rmas\u0131, Yetkinlik ve Payda\u015f \u0130leti\u015fimi<\/h2>\n<p data-path-to-node=\"27\">En g&uuml;&ccedil;l&uuml; altyap\u0131lar bile arkas\u0131ndaki ekibin yetkinli\u011fi kadar g&uuml;&ccedil;l&uuml;d&uuml;r.<\/p>\n<ul data-path-to-node=\"28\">\n<li>\n<p data-path-to-node=\"28,0,0\"><strong data-path-to-node=\"28,0,0\" data-index-in-node=\"0\">DevOps ve &Ccedil;apraz Yetkinlik (Cross-Skilling):<\/strong> Ekipler aras\u0131 silolar kald\u0131r\u0131lmal\u0131, otomasyon odakl\u0131 &ccedil;al\u0131\u015fma k&uuml;lt&uuml;r&uuml; benimsenmelidir. Tek ki\u015fiye ba\u011f\u0131ml\u0131l\u0131k riskini (SPOF) azaltmak i&ccedil;in ekip i&ccedil;i &ccedil;apraz e\u011fitimler te\u015fvik edilmelidir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"28,1,0\"><strong data-path-to-node=\"28,1,0\" data-index-in-node=\"0\">Payda\u015f \u0130leti\u015fimi:<\/strong> BT ekipleri, i\u015f birimleriyle ileti\u015fim kurarken karma\u015f\u0131k teknik jargon yerine i\u015f s&uuml;re&ccedil;lerine ve &ccedil;&ouml;z&uuml;me odaklanan, \u015feffaf bir dil benimsemelidir.<\/p>\n<\/li>\n<\/ul>\n<p data-path-to-node=\"31\">Ba\u015far\u0131l\u0131 bir kurumsal BT y&ouml;netimi; teknik uzmanl\u0131k, stratejik vizyon, kesintisiz g&uuml;venlik ve do\u011fru finansal planlaman\u0131n birle\u015fimidir. Bu 6 ana maddede kurulacak sa\u011flam bir yap\u0131, BT departman\u0131n\u0131 sadece bir masraf merkezi olmaktan &ccedil;\u0131kar\u0131p kurumun en b&uuml;y&uuml;k rekabet avantaj\u0131na d&ouml;n&uuml;\u015ft&uuml;recektir.<\/p>\n<\/div>","excerpt":"Ba\u015far\u0131l\u0131 bir kurumsal BT y\u00f6netimi; teknik uzmanl\u0131k, stratejik vizyon, kesintisiz g\u00fcvenlik ve do\u011fru finansal planlaman\u0131n birle\u015fimidir. Bu 6 ana maddede kurulacak sa\u011flam bir yap\u0131, BT departman\u0131n\u0131 sadece bir masraf merkezi olmaktan \u00e7\u0131kar\u0131p kurumun en b\u00fcy\u00fck rekabet avantaj\u0131na d\u00f6n\u00fc\u015f\u00fcr..!","created_at":"2026-07-23 10:19:18","updated_at":"2026-09-23 16:37:39","category_id":6,"view_count":267,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-07-23 07:19:18","featured_image":"\/uploads\/images\/2026\/07\/6a61c06d6c8dd_1784791149.png","slug":"basarili-bir-kurumsal-bt-yonetimi","category_name":"Sistem","category_slug":"sistem"}