20.500.12556/DKUM-45752 UPORABA STANDARDOV DRUŽINE ISO 27000 PRI REVIZIJI INFORMACIJSKIH SISTEMOV USING THE ISO 27000 FAMILY OF STANDARDS WHEN PERFORMING IINFORMATION SYSTEM AUDITS Pričujoče diplomsko delo predstavlja področji revizije informacijskih sistemov in upravljanja informacijske varnosti po standardu ISO/IEC 27001. Obe področji sta pri tem povezani z relevantno in veljavno slovensko zakonodajo. Glavni namen te naloge je združiti obe področji v enoten in skladen sistem revidiranja informacijske varnosti. Za dosego tega cilja so usklajene zahteve standarda ISO 27001 s standardnim orodjem, tako revizije informacijskih sistemov, kot tudi upravljanja informatike nasploh COBIT 5. V končni fazi pa so izdelana natančna priporočila za revizijo informacijske varnosti, ki jih omogočata standarda ISO/IEC 27002 in ISO/IEC 27007. The present diploma work presents the fields of information systems audit and management of information security according to standard ISO/IEC 27001. Both areas are linked to the relevant and applicable Slovenian legislation. The main purpose of this diploma work is to unite the two areas into a unified and consistent system of information security auditing. This goal was achieved by aligning the requirements of ISO/IEC 27001 standard with the standard tool for not only performing information systems audit but also management of information technology in general COBIT 5. In the final stage detailed recomendations for information security audit that are made possible by the standards ISO/IEC 27002 and ISO/IEC 27007 are formed. revizija informacijskih sistemov sistem za upravljanje informacijske varnosti revizija informacijske varnosti ISO/IEC 27000 ISO/IEC 27001 ISO/IEC 27002 ISO/IEC 27007 COBIT 5 information system audit information security management system information security audit ISO/IEC 27000 ISO/IEC 27001 ISO/IEC 27002 ISO/IEC 27007 COBIT 5 true true false [A. Greif] Slovenski jezik Angleški jezik Diplomsko delo/naloga 2014-09-02 20:15:56 2014-12-18 14:26:21 2022-05-16 03:06:24 2021-05-03 03:34:08 2014 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.775(043.2) 18509846 URN:SI:UM:DK:3GZ5YS7A UNI_Greif_Anja_2014.pdf UNI_Greif_Anja_2014.pdf 1 5FC5F654026A1DB68545077DB7D1BC2B 957a64a21220ebdcf8e05280d55d6cd829642901766b911a2e1af55457a9b7a2 29f0ba47-7c0b-11eb-bb7a-00155d0001ca https://dk.um.si/Dokument.php?lang=slv&id=66574 Fakulteta za elektrotehniko, računalništvo in informatiko 0 0 0