20.500.12556/DKUM-40515 UVAJANJE STANDARDOV S PODROČJA INFORMACIJSKE TEHNOLOGIJE V MARIBORSKI KNJIŽNICI THE INTRODUCTION OF IT STANDARDS IN MARIBOR PUBLIC LIBRARY Naloga obravnava uvajanje sistema za upravljanje varovanja informacij (SUVI) s pomočjo standarda ISO/IEC 27001:2005 v Mariborsko knjižnico. Kratko sta predstavljena dva standarda: ISO 9001:2008 ter ISO 27001:2005. Izdelana je bila analiza obstoječega stanja informacijske varnosti v Mariborski knjižnici. Izvedeni so bili intevjuji z zaposlenimi in pregledana je bila knjižnična dokumentacija. Vključili smo 133 kontrol iz 11 poglavij standarda ISO/IEC 27001:2005. Glavna priporočila analize se nanašajo na: a) pomanjkljivo in neažurno dokumentacijo, ki jo zahteva sistem za upravljanje varovanja informacij, b) nedefinirane ali slabo definirane procese in c) pomanjkljivosti posameznih tehničnih rešitev v informacijskem sistemu knjižnice. Ker ima Mariborska knjižnica veljaven certifikat za sistem vodenja kakovosti SIST ISO 9001:2008, je bila izdelana primerjava s standardom ISO/IEC 27001:2005. Namen primerjave je zagotoviti enotno upravljanje procesov, ki bo zadostilo zahtevam obeh standardov brez nepotrebne porabe virov. This research explores the introduction of Information Security Management System (ISMS) in accordance with the standard ISO/IEC 27001:2005 in public library »Mariborska knjižnica«. It briefly presents two standards: ISO 9001:2008 and ISO/IEC 27001:2005. An analysis of information security at Maribor Library was carried out, which was performed by using interviews with employees as well as an overview of the library's documentation. In the analysis, 133 controls from 11 chapters of the standard ISO/IEC 27001:2005 have been inluded. The main recomendations based on our analysis refer to: a) non-existing or not up-to-date documentation which is required by information security management system, b) undefined or weak defined processes and c) weaknesses of particular technical solutions within the library’s information system. As the »Mariborska knjižnica« has a valid certificate for its quality management system ISO 9001:2008, a comparison with the ISO/IEC 27001:2005 standard was presented. The purpose of this comparison was to ensure unified process management that would meet the requirements of both standards without unnecessary usage of resources. Kakovost informacijski sistem knjižnica sistem upravljanja varovanja informacij SUVI ISO 9001:2008 ISO 27001:2005 Quality information system library Information Security Management System ISMS ISO 9001:2008 ISO 27001:2005 true true false Slovenski jezik Angleški jezik Diplomsko delo 2013-05-27 12:45:25 2013-07-16 11:17:34 2022-05-12 23:44:12 2021-04-23 03:25:16 2013 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 7187731 URN:SI:UM:DK:XCHIVEDX UNI_Sirk_Irena_2013.pdf UNI_Sirk_Irena_2013.pdf 1 754E06502389F3F190F48647B36AA95E d1b3fa75642e8958a996c9277a24daaa3a4c3e89a0b95fe706ba9c09218fc676 f8381503-7c09-11eb-bb7a-00155d0001ca 20.500.12556/dkum/199c78cd-359b-49c7-9ab9-48c8469499ea https://dk.um.si/Dokument.php?lang=slv&id=55480 Fakulteta za organizacijske vede 0 0 0