20.500.12556/DKUM-47288 ORGANIZACIJA PROJEKTA VODENJA REVIZIJSKIH SLEDI V BANKI ORGANISATION OF THE BANK AUDIT TRAILS MANAGEMENT PROJECT Skladno z vedno večjimi zahtevami za odgovornost podjetij, zahtevami nadzornih institucij in povečanim obsegom delovanja je potrebno uvesti sistematičen pristop k zagotavljanju revizijskih sledi. V Banki, v kateri sem zaposlen (njeno ime je zaradi zahteve banke izpuščeno iz naloge), je zagotavljanje sledljivosti stvar vsakega informacijskega sistema posebej, za definicijo in potrditev ustreznosti načina beleženja dogodkov pa je odgovoren poslovni lastnik procesa. Ker je njihovo število čedalje večje, je nujno postaviti enotne okvirje in pritegniti k sodelovanju tudi tiste poslovne lastnike (in skrbnike ustreznih informacijskih podpor), ki do sedaj niso posvečali dovolj pozornosti ali niso imeli ustreznega znanja ali drugih sredstev, da v svojih sistemih zagotovijo sledljivost. Načrtujemo sistem, ki bi povezal parcialne rešitve in izboljšal sledljivost v tistih sistemih, kjer je ta še pomanjkljiva. Zagotovil naj bi nadzor tako nad podatkom tam, kjer se hrani, kot tudi nad akcijami, ki jih programsko izvajamo s temi podatki po tem, ko jih preberemo. Pri tem moramo seveda upoštevati tudi vse možnosti dostopov z uporabo posebnih pravic, kot so administrativne pravice, sistemska orodja in nadzor nad spreminjanjem aplikativne programske opreme. Ker gre za prepleteno dejavnost, ki zahteva delovanje ljudi iz različnih področij (poslovni lastniki, informacijski skrbniki, pravniki, skrbnik varnosti informacij, revizorji,…) in v različnih procesih (tako v okviru navodil in načina dela, kot tudi ustrezne informacijske organizacije in podpore v posameznem informacijskem sistemu), je logičen pristop k uvedbi prej opisanega sistema v obliki projektnega dela. Organizirati in izpeljati je potrebno projekt v organizaciji, ki do sedaj še ni imela veliko izkušenj s projektnim delom. In accordance with increasing demands for enterprise responsibility, the growth of work area as well as greater demands required by monitoring institutions, it is necessary to implement a systematic approach to provide audit trails. In the Bank, (by the bank’s demand its name is excluded from this work) ensuring traces of processes is in domain of each information system itself. Responsibility for definitions and approval of appropriate event tracing lies on business process owners themselves. As their number has been gradually on the increase, it has become inevitable to grant a unique frame and pursue collaboration with those business process owners as well as information system tutors that either did not lay enough attention on these issues or did not have adequate knowledge or resources to ensure traceability. We plan a system that would link together partial solutions, and improve traceability in the systems in which it proves to be insufficient. This should ensure control over data on their location as well as actions that programs execute on them after they have been read. In addition to this, it is essential to consider possibilities of accessing data by implementing special priorities such as administrative rights, using system tools, and accordingly to monitor changes of application programs. Owing to the fact that these activities interact with one another, the collaboration of people from different fields of profession such as business process owners, information system tutorials, information security officers, auditors, etc, which are involved in varied process steps is required. Since these guide organizations by giving instructions on work procedures, provide adequate information organisation, give support on particular information systems, project management is a sound logic. We need to organize and accomplish such a project in the organization that so far has not really had considerable tradition of project working. revizijske sledi beleženje dogodkov informacijska podpora poslovnih procesov projektno delo audit trails event tracing information support of business processes project management true true false Slovenski jezik Angleški jezik Diplomsko delo/naloga 2015-01-29 07:35:37 2015-02-27 12:43:13 2022-05-20 03:07:33 2021-05-06 03:22:47 2015 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 7406355 URN:SI:UM:DK:M6VMBRMQ VS_Kamensek_Marko_2015.pdf VS_Kamensek_Marko_2015.pdf 1 18E10F95E75C70E2542422D72AC9CC19 47f045a663a97680b726d7369b72bf1c602255737d962d1ef08592410b413b1f 87e992c5-7c0b-11eb-bb7a-00155d0001ca https://dk.um.si/Dokument.php?lang=slv&id=69902 Fakulteta za organizacijske vede 0 0 0