20.500.12556/DKUM-22920 VAROVANJE VIROV INFORMACIJSKEGA SISTEMA V PRIMERU ZUNANJEGA IZVAJANJA PROTECTION OF SOURCES OF INFORMATION SYSTEM IN THE CASE OF EXTERNAL CONTRACTOR V magistrski nalogi smo naredili analizo varovanja virov IS v organizaciji, ki želi oddati svoje notranje vire zunanjemu izvajalcu. Podrobno smo opisali: možne grožnje in njihove opredelitve in prepoznavanje le – teh, aktualno zakonodajo in standarde, ki opredeljujejo varnost IS in zunanje izvajanje, opisali smo varnostne politike, ki jih je uvedla krovna organizacija in katere je nujno uvesti tudi v vseh hčerinskih organizacijah. Naredili smo tudi analizo treh ključnih virov v obravnavani organizaciji (človeški viri, strojna in programska oprema ter komunikacijska infrastruktura), ki vključujejo tudi opise le–teh s čimer je bila prikazana razsežnost vseh razpoložljivih virov. Osrednji del naloge smo namenili opredelitvi razlogov za zunanje izvajanje in možnosti oddaje virov v organizaciji, da se na podlagi analize tveganja odloči katere vire lahko in katere ne more oddati v zunanje izvajanje. Ugotovili smo, da je treba ob odločitvi za zunanje izvajanje opredeliti tudi obratni proces, in sicer je treba misliti na ponovno notranje izvajanje, ker veliko večina organizacij ne pričakuje in ne planira, da je možno, da bo ob oddaji virov zunanjemu izvajalcu kdaj treba preiti na ponovno notranje izvajanje. Opredelili smo tudi stroškovno analizo in upravičenost zunanjega izvajanja, ki je pokazala, da bi morali zelo znižati število ur ali pa ceno glede na trenutne finančne podatke s katerimi smo razpolagali ali po drugi strani, da je cena urne postavke bistveno nižja za javni sektor informatike, kot gospodarski sektor. Naredilo smo primerjavo notranjega in zunanjega izvajanja in na podlagi tega smo izvedli PSPN analizo med eno in drugo opcijo. To nam je dalo celotno sliko: kaj, kdaj in zakaj se splača. Na koncu smo podali še ključne postavke za podlage za izbiro zunanjega izvajanja in v zaključku opredelil možnosti za nadaljnji razvoj. The master's thesis analyses the protection of IS resources in organization intending to rent out its own internal resources to an external contractor. Special emphasis has been made on recognizing and defining potential threats, current legislation and standards defining IS security and outsourcing, as well as on security policies, established by an umbrella organization, which are to be adopted by all subsidiary companies. Furthermore the analysis of three key resources in organization in question has been made i.e. human resources, hardware and software and communications infrastructure including their description in order to present a dimension of all available resources. The second part of the thesis defines motives for outsourcing and possibilities of renting out internal resources in order to, on the basis of risk analysis, establish which resources the organization can and which cannot rent out. We have established, that in the process of decision making, the organization has to consider both: outsourcing as well as a backward process i.e. re-in sourcing, since most of the organizations do not foresee or plan such possibility. In the following chapters the cost analysis as well as eligibility of outsourcing has been made based on current information on financial situation, showing that either the number of working hours or the costs should be reduced, and that an hourly rates of IT are substantially lower in public sector than in private sector. The comparison between in sourcing and outsourcing has been made and based on the results the SWOT analysis capturing both options. The results gave us an insight on what, when and why outsource pays-out. Finally we have defined key issues enabling bases for selection of outsourcing and identified possibilities for further development. Zunanje izvajanje Varovanje virov Informacijski sistem Organizacija Outsourcing Protecion of resources Information System Organization true true false Slovenski jezik Angleški jezik Magistrsko delo 2012-05-09 14:48:02 2012-08-21 12:41:22 2022-04-14 12:12:37 2023-12-29 03:32:27 2012 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 7053587 URN:SI:UM:DK:BJD1AJKI MAG_Slobodjanac_Miran_2012.pdf MAG_Slobodjanac_Miran_2012.pdf 1 139B0B72E331AA4E8E7056A097320B6D a4f13ec9d4bda2a3fce568c4f2bd378bbcfd5cc9c597a4b78c75d4b37576f2ee 9b3a8f34-7c06-11eb-bb7a-00155d0001ca 20.500.12556/dkum/aae41266-7b1e-48e4-b85a-e78a52f3c255 https://dk.um.si/Dokument.php?lang=slv&id=29868 Fakulteta za organizacijske vede 0 0 0