20.500.12556/DKUM-16656 VZPOSTAVITEV SISTEMA UPRAVLJANJA VAROVANJA INFORMACIJ V NLB, D.D. ESTABLISHMENT OF INFORMATION SECURITY MANAGEMENT SYSTEM IN NLB, D.D. Diplomska naloga obravnava vzpostavitev sistema upravljanja varovanja informacij (SUVI) v Novi Ljubljanski banki d.d. in merjenje učinkovitosti kontrol. V prvem delu diplomske naloge so podane teoretične osnove s področja varovanja informacij. Opisani so standardi in primeri dobre prakse, ki jih organizacije lahko uporabijo v pomoč pri doseganju učinkovitega varovanja informacij. V drugem delu je predstavljena organizacija Nova Ljubljanska banka d.d. Predstavljena je organiziranost projektnega sistema Nove Ljubljanske banke d.d. in življenjski cikel projektov. V nadaljevanju je opisan projektni pristop k vzpostavitvi in upravljanju SUVI, katerega aktivnosti so razvrščene po posameznih fazah Demingovega kroga, tako da je razvidno, v kateri fazi se Nova Ljubljanska banka d.d. nahaja in katere aktivnosti morajo biti še izvedene. Potem je predstavljen model merjenja učinkovitosti kontrol, s katerim se je ocenjevala skladnost z zahtevami po izobraževanju zaposlenih s področja varovanja informacij. Opisan je sam postopek zasnove modela merjenja učinkovitosti, kjer so opisno in grafično predstavljeni tudi rezultati merjenja. The dissertation deals with establishing of Information security management system (ISMS) and measure the effectiveness of security controls within the organization Nova Ljubljanska banka, d.d. The first part of dissertation consists of the theoretical basis of information security. It describes the standards and best practices, that organizations can use to achieve effective information security. In the second part of dissertation the organization Nova Ljubljanska banka, d.d. is presented. Then the project system organization of Nova Ljubljanska banka, d.d. and the project life cycle are presented. In the next sequel the project-based approach to the establishment and management of the ISMS is presented. To determine the phase in witch Nova Ljubljanska banka, d.d. is and to recognize the activities that needs to be taken, the ISMS's activities are arranged by its corresponding phase of Deming cycle. Then the information security measurement model we used to assess compliance with annual information security awareness training requirement is presented. Here the model's design process is presented and then the results of measurement are descriptively and graphically presented. Sistem upravljanja varovanja informacij SUVI Varovanje informacij Vzpostavitev Information security management system ISMS Information Security Establishment true true false Slovenski jezik Angleški jezik Diplomsko delo 2010-11-05 13:08:08 2011-01-13 11:21:15 2022-04-13 08:47:54 2023-12-21 03:12:49 2010 0 Kranj 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 6790419 URN:SI:UM:DK:GHB72ZTQ UNI_Maticic_Uros_2010.pdf UNI_Maticic_Uros_2010.pdf 1 A8BF5298FC617EBF8C455B8C5F19ACBF 76964be55e8832594927b2b026b03a96f405028a237f62b589069b2158b1e7c2 b29f7448-7c04-11eb-bb7a-00155d0001ca 20.500.12556/dkum/1a4aaecb-4579-4961-a607-358009a7e0cd https://dk.um.si/Dokument.php?lang=slv&id=18989 Fakulteta za organizacijske vede 0 0 0