Primerjava standardov informacijske varnostne politike

diplomsko delo

Uroš Godec (Author), Marko Hölbl (Mentor)

Abstract

Informacijska varnostna politika in njeno izvajanje sta ključna dejavnika, ki pomembno vplivata na poslovanje podjetja in organizacije. Ker so med podjetji razlike in specifike v načinu delovanja, univerzalna varnostna politika pa ne obstaja, si podjetja pri njenem ustvarjanju lahko pomagajo z različnimi standardi. Diplomsko delo predstavlja informacijsko varnostno politiko in upravljanje informacijske varnosti po standardih ISO/IEC 27002 ter ISO/IEC 17799 oziroma BS 7799. Glavni namen te naloge je predstavitev in medsbojna primerjava obeh izbranih standardov na primeru podjetja Štore Steel d.o.o. in na podlagi izdelanega kontrolnega vprašalnika ocene skladnosti prikaz primernejšega standarda za to podjetje.

Keywords

informacijska varnostna politika;sistem za upravljanje informacijske varnosti;varnostna politika;ISO/IEC 27001;ISO/IEC 27002;ISO/IEC 17799;BS 7799;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2016
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FERI - Faculty of Electrical Engineering and Computer Science
Publisher:	U. Godec
UDC:	004.775:004.056(043.2)
COBISS:	20211222
Views:	1573
Downloads:	236
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	COMPARING INFORMATION SECURITY POLICY STANDARDS
Secondary abstract:	Information security policy and its implementation are key factors that have a significant impact on the operations of companies and organizations. A universal security policy does not exist because of the differences and specifics in the mode of operation amongst various companies. Companies develop their own policy with the help of variety of standards. The present thesis represents informaton security policy and information security management according to the ISO/IEC 27002 and ISO/IEC 17799 respectively BS 7799. The main purpose of this thesis is presentation and comparison of these two selected standards based on the case of company Štore Steel d.o.o. and presentation of the most appropriate standard for this company based on the created checklist of compliance assessment.
Secondary keywords:	information security policy;information management system;
URN:	URN:SI:UM:
Type (COBISS):	Undergraduate thesis
Thesis comment:	Univ. v Mariboru, Fak. za elektrotehniko, računalništvo in informatiko, Računalništvo in informatika
Pages:	X, 94 str.
ID:	9161623