20.500.12556/DKUM-23129 UČINKOVITO UPRAVLJANJE VAROVANJA PODATKOV V KARTIČNEM PLAČILNEM PROMETU EFECTIVE DATA SECURITY MANAGEMENT IN CARD PAYMENT OPERATIONS Uvedba zahtev standarda PCI DSS je za banko, ki nudi storitve vezane na kartično poslovanje, obvezna. V minulih letih so banke investirale v kompleksne rešitve, s katerimi zagotavljajo visok nivo informacijske varnosti. Kljub temu standard PCI DSS v določenih zahtevah predstavlja dodatne varnostne ukrepe, ki jih morajo uvesti banke. V raziskovalnem delu smo izvedli analizo standarda PCI DSS, s katero smo ugotovili vidike, v katerih je standard šibek a so za učinkovito uvedbo varnostnih zahtev na področju plačilnega sistema bistveni. V drugem delu raziskovalnega dela smo predstavili možnost uporabe različnih modelov in standardov (ISO/IEC 27001, ISO/IEC 27002, COBIT, CMMI in ITIL) in njihove prednosti pri integraciji s standardom PCI DSS, s katerimi si lahko banka pomaga pri dopolnitvi uvedbe standarda, da poveča učinkovitost uvedbe. V zaključku smo izpeljali primer integracije zahtev standarda PCI DSS s procesnim modelom COBIT. The introduction of the PCI DSS standard requirements for a bank that offers services related to payment cards is mandatory. In recent years, banks have invested in complex solutions which provide a high level of information security. However, the PCI DSS standard in certain requirements constitutes additional security measures, which need to be implemented by banks. In the research work we performed an analysis of the PCI DSS standard by which we identify aspects in which the standard is weak, but they are essential for the effective implementation of safety requirements in the payment system. In the second part of the research work we have presented the possibility of using different models and standards (ISO/IEC 27001, ISO/IEC 27002, COBIT, CMMI and ITIL) and their advantages in case of the integration with the PCI DSS standard, which can help the bank to supplement the introduction of standard to increase the effectiveness of the implementation. In conclusion, we developed integration of the PCI DSS standard requirements with the COBIT process model. varovanje podatkov varnostne kontrole kartični plačilni promet standard PCI DSS data protection security checks payment cards standard PCI DSS true true false [B. Šauperl] Slovenski jezik Angleški jezik Magistrsko delo 2012-05-22 21:58:22 2012-05-29 06:48:10 2022-04-14 12:22:10 2023-12-31 03:20:51 2012 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 336.71:[659.2:004](043) 16166166 URN:SI:UM:DK:QYIKXUJQ MAG_Sauperl_Blanka_2012.pdf MAG_Sauperl_Blanka_2012.pdf 1 215434380CC8F033AF6F44A0CA3F024E 54f3be7fa9a966ba9d27301611eeef6df2ec6f22516b2d4860cb116d96d010e7 f12eb98e-7c05-11eb-bb7a-00155d0001ca 20.500.12556/dkum/d9b31f81-a842-41c7-9f26-a0a65d8a3bbc https://dk.um.si/Dokument.php?lang=slv&id=31659 Fakulteta za elektrotehniko, računalništvo in informatiko 0 0 0