diplomsko delo visokošolskega strokovnega študija Organizacija in management informacijskih sistemov
Samo Knafelj (Author), Alenka Brezavšček (Mentor)

Abstract

Diplomska naloga obravnava analizo informacijske varnosti v podjetju Optiweb d.o.o. Mlada IT podjetja običajno, vsaj na začetku svojega delovanja, ne posvečajo veliko pozornosti informacijski varnosti, saj se pogosto ne zavedajo njenega pravega pomena. Podobno lahko ugotovimo tudi za obravnavano podjetje, ki se ukvarja z izdelavo in optimizacijo spletnih strani in spletnih trgovin. Prvi del naloge obsega teoretične osnove s področja informacijske varnosti ter predstavitev podjetja Optiweb d.o.o. V praktičnem delu diplomske naloge pa je v skladu s standarom ISO/IEC 27005:2008 izdelana analiza varnostnih tveganj. Sledi predstavitev rezultatov izvedene analize. Na podlagi le-teh so podani predlogi za izboljšvabe, predvsem na področjih, kjer je podjetje najbolj ranljivo. Impmlementacija predlaganih ukrepov bo zagotivila boljšo zašito dobrin informacijskega sistema in s tem doprinesla k višjemu nivoju informacijske varnosti.

Keywords

informacijski sistem;varnost;grožnje;

Data

Language: Slovenian
Year of publishing:
Typology: 2.11 - Undergraduate Thesis
Organization: UM FOV - Faculty of Organizational Sciences
Publisher: [S. Knafelj]
UDC: 659.2
COBISS: 7789587 Link will open in a new window
Views: 1494
Downloads: 262
Average score: 0 (0 votes)
Metadata: JSON JSON-RDF JSON-LD TURTLE N-TRIPLES XML RDFA MICRODATA DC-XML DC-RDF RDF

Other data

Secondary language: English
Secondary title: ANALYSIS OF INFORMATION SECURITY IN SMALL IT COMPANY
Secondary abstract: In the thesis, the information security analyses at the company Optiweb d.o.o. is performed At the beginning of their business career young IT companies usually do not give much attention to information security. Unfortunately, they often are not aware of its real importance. The same can be said for the company under consideration which is specialised in the design and optimisation of websites and online stores. The first part of the thesis outlines the theoretical framework of information security. Besides the company Optiweb d.o.o. is presented. In the empirical part of the thesis a information security risk analysis is performed in accordance with the ISO/IEC 27005:2008 standard. The final part of the thesis interprets the results. In the areas where main vulnerabilities have been revealed suitable security measures are suggested. In our opinion, implementation of these measures can improve the level of information security in the company.
Secondary keywords: Information system;Security;Threats;Assets;Risk analysis;Information secutiry management system;ISO/IEC 27005:2008;
URN: URN:SI:UM:
Type (COBISS): Bachelor thesis/paper
Thesis comment: Univ. v Mariboru, Fak. za organizacijske vede
Pages: 46 f.
ID: 9165530
Recommended works:
, diplomsko delo visokošolskega strokovnega študija Organizacija in management informacijskih sistemov
, magistrska naloga
, zaključna strokovna naloga visoke poslovne šole
, diplomsko delo univerzitetnega študija Organizacija in management informacijskih sistemov
, diplomsko delo visokošolskega strokovnega študija