diplomsko delo univerzitetnega študija Organizacija in management informacijskih sistemov
Andraž Pirnat (Author), Alenka Brezavšček (Mentor)

Abstract

V diplomskem delu je bila izvedena presoja skladnosti s standardom ISO/IEC 27001:2013 v manjšem proizvodnem podjetju BVG, d. o. o. Zaradi same narave in velikosti podjetja upravljanje informacijske varnosti do sedaj ni bilo na prvem mestu, vendar se vodstvo podjetja vse bolj zaveda strateškega pomena tega področja. V prvem delu diplomskega dela so podane teoretične osnove s področja informacijske varnosti. Sledijo predstavitev okolja, torej samega podjetja BVG, d.o.o., popis njihovih poslovnih procesov in trenutne informacijske podpore. V empiričnem delu so podani rezultati analize skladnosti s standardom ISO/IEC 27001:2013, ki so bili pridobljeni s pomočjo metodološkega orodja, izdelanega v okolju Excel, dosegljivega na spletu. Na koncu diplomskega dela so ponujene rešitve, ki bi lahko pripomogle k izboljšanju stanja na področju informacijske varnosti.

Keywords

informacijski sistem;varnost;skladnost;

Data

Language: Slovenian
Year of publishing:
Typology: 2.11 - Undergraduate Thesis
Organization: UM FOV - Faculty of Organizational Sciences
Publisher: [A. Pirnat]
UDC: 659.2
COBISS: 8133395 Link will open in a new window
Views: 567
Downloads: 96
Average score: 0 (0 votes)
Metadata: JSON JSON-RDF JSON-LD TURTLE N-TRIPLES XML RDFA MICRODATA DC-XML DC-RDF RDF

Other data

Secondary language: English
Secondary title: Audit of ISO/IEC 27001 standard compliance in small productioncompany
Secondary abstract: The thesis we carried out is an audit of the standard ISO / IEC 27001: 2013 compliance in a small manufacturing company BVG d.o.o. Due to the nature and size of the company, information security management has not been a priority for the company but the company management is becoming more and more aware of the strategic importance of this area. In the theoretical part of the thesis, we have given the theoretical basics in the field of information security. The following is a presentation of the environment, that is, BVG d.o.o. and an inventory of the company’s business processes and existing information technology. The empirical part of the thesis presents the results of compliance analysis with the ISO / IEC 27001:2013 standard. The analysis was carried out with the help of a methodological tool developed in Excel accessible on the Internet. The results were analysed and based on the findings the management of the company was provided with solutions that could help improve the information security level.
Secondary keywords: information system;security;information security management system;standard ISO/IEC 27001:2013;compliance;audit;
Type (COBISS): Bachelor thesis/paper
Thesis comment: Univ. v Mariboru, Fak. za organizacijske vede
Pages: 45 f.
ID: 11222256
Recommended works:
, diplomsko delo univerzitetnega študija Organizacija in management informacijskih sistemov
, diplomsko delo visokošolskega strokovnega študija Organizacija in management informacijskih sistemov
, diplomsko delo visokošolskega strokovnega študija Organizacija in management delovnih procesov
, magistrska naloga
, diplomsko delo