Upravljanje s tveganji v organizacijah - vidik informacijske varnosti

diplomsko delo univerzitetnega študijskega programa Varstvoslovje

Toni Zupanc (Author), Igor Bernik (Mentor)

Abstract

Diplomsko delo se osredotoča na informacijsko varnost v manjših organizacijah. Informacijska varnost je pojem, ki ga večje organizacije zelo dobro poznajo in se s tem problemom tudi temeljito ukvarjajo. Informacijska varnost je v današnjem času tako pomembna, da se je tej problematiki, že namenilo več standardov, ki pomagajo organizacijam, da jo izboljšajo. V manjših organizacijah pa nastaja problem z znanjem in sredstvi, ki jih organizacija poseduje in nameni informacijski varnosti. Da bi bolje razumeli pomen informacijske varnosti, smo v teoretičnem delu predstavili tveganja, ki pretijo organizacijam na področju informacijske varnosti, standarde, ki so se uveljavili na področju upravljanja s tveganji in. Dotaknili smo se tudi uvedbe priporočenih praks za upravljanje z informacijsko varnostjo v manjše organizacije (priprava varnostnega načrta, in pripravo ustreznih varnostnih preprek). Empirični del diplomskega dela predstavlja intervju, ki smo ga opravili z dvema manjšima organizacijama s katerim smo ugotavljali ali se zavedajo groženj, ki pretijo njihovemu poslovanju, na kakšen način poskrbijo za informacijsko varnost, ali so že zaznali katero od groženj in ali sledijo kateremu od standardov, ki so uveljavljeni na področju informacijske varnosti.

Keywords

diplomske naloge;upravljanje s tveganji;informacijska varnost;grožnje;manjše organizacije;

Data

Language:	Slovenian
Year of publishing:	2018
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FVV - Faculty of Criminal Justice
Publisher:	[T. Zupanc]
UDC:	004.056(043.2)
COBISS:	3622634
Views:	458
Downloads:	85
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Risk management in organizations - aspect of information security
Secondary abstract:	This thesis focuses on information security in small organizations. Information security is a concept well known to large organizations and is a major concern which is addressed very seriously. In this time and age, the importance of information security is very high and many methods and standards were created to help organizations improve their level of information security. In small organizations, problems occur due to the lack of knowledge and resources to manage risks efficiently. In the theoretical part of our thesis, we have presented the risks that threaten organizations in the field of information security in order to better understand the significance of information security, the standards concerning risk management, and we also touched on the use of recommended practices for managing risks in small organizations (having a security plan, creating appropriate safety barriers). In the research part of the thesis, we conducted an interview with the directors of a couple of small organizations to determine whether they are aware of the threats to their business, the way of managing risks, and providing information security, whether they had any security breaches so far, and whether they provide information security by following any of the standards or methods concerning information security.
Secondary keywords:	risk management;information security;threats;small organizations;
URN:	URN:SI:UM:
Type (COBISS):	Bachelor thesis/paper
Thesis comment:	Univ. v Mariboru, Fak. za varnostne vede, Ljubljana
Pages:	VI, 45 str.
ID:	10979490