Zagotavljanje kibernetske varnosti in notranje revidiranje

magistrsko delo

Eva Muzel (Author), Iztok Kolar (Mentor)

Abstract

V magistrskem delu bomo opredelili kibernetsko varnost in s tem povezane probleme, tarče in grožnje. Predstavljena bo tudi institucionalna ureditev kibernetske varnosti v Sloveniji, tako zakonodaja kot tudi institucije. V tem sklopu bodo predstavljeni mednarodni standardi in sistemi ravnanja s kibernetsko varnostjo, posebno pozornost pa bomo namenili globalnim smernicam za revizijo tehnologije GTAG za ocenjevanje tveganja kibernetske varnosti pri opredeljevanju vlog treh obrambnih linij in pristop za ocenjevanje tveganj in kontrol na področju kibernetske varnosti. V drugem delu naloge se bomo osredotočili na notranjo revizijo v povezavi s kibernetsko varnostjo. V delu bo predstavljen celostni pristop k zagotavljanju kibernetske varnosti in kaj bi moral vedeti notranji revizor o kibernetski varnosti. Zaključek drugega dela pa bo vseboval tudi preglede raziskav o notranji reviziji in kibernetski varnosti.

Keywords

informacijski sistemi;kibernetska varnost;kibernetske grožnje;obvladovanje tveganj;notranja revizija;

Data

Language:	Slovenian
Year of publishing:	2020
Typology:	2.09 - Master's Thesis
Organization:	UM EPF - Faculty of Economics and Business
Publisher:	[E. Muzel]
UDC:	004.056.53:657.6
COBISS:	35692547
Views:	865
Downloads:	154
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Providing cyber security and internal auditing
Secondary abstract:	In this master thesis we will define cyber security and related problems, targets and threads. The institutional arrangement of cyber security in Slovenia will be presented. Legislation as well as institutions. In this section we will also present international standards and cyber security management systems. Special attention will go to global technology audit guide - GTAG for assessing cybersecurity risk in the field of defining roles of the three lines of defences and also approach for risk assessment and cyber security controls. Second part will focus on internal audit in relation with cyber security. We will present a comprehensive approach to cyber security as well as what internal auditor should know about cyber security. Conclusion of the second part will include reviews of research about internal audit and cyber security.
Secondary keywords:	cyber security;information system;cyber threats;risk management;internal audit;
Type (COBISS):	Master's thesis/paper
Thesis comment:	Univ. v Mariboru, Ekonomsko-poslovna fak.
Pages:	73 str.
ID:	11950965