20.500.12556/DKUM-71594 Upravljanje s tveganji v organizacijah - vidik informacijske varnosti diplomsko delo univerzitetnega študijskega programa Varstvoslovje Risk management in organizations - aspect of information security Diplomsko delo se osredotoča na informacijsko varnost v manjših organizacijah. Informacijska varnost je pojem, ki ga večje organizacije zelo dobro poznajo in se s tem problemom tudi temeljito ukvarjajo. Informacijska varnost je v današnjem času tako pomembna, da se je tej problematiki, že namenilo več standardov, ki pomagajo organizacijam, da jo izboljšajo. V manjših organizacijah pa nastaja problem z znanjem in sredstvi, ki jih organizacija poseduje in nameni informacijski varnosti. Da bi bolje razumeli pomen informacijske varnosti, smo v teoretičnem delu predstavili tveganja, ki pretijo organizacijam na področju informacijske varnosti, standarde, ki so se uveljavili na področju upravljanja s tveganji in. Dotaknili smo se tudi uvedbe priporočenih praks za upravljanje z informacijsko varnostjo v manjše organizacije (priprava varnostnega načrta, in pripravo ustreznih varnostnih preprek). Empirični del diplomskega dela predstavlja intervju, ki smo ga opravili z dvema manjšima organizacijama s katerim smo ugotavljali ali se zavedajo groženj, ki pretijo njihovemu poslovanju, na kakšen način poskrbijo za informacijsko varnost, ali so že zaznali katero od groženj in ali sledijo kateremu od standardov, ki so uveljavljeni na področju informacijske varnosti. This thesis focuses on information security in small organizations. Information security is a concept well known to large organizations and is a major concern which is addressed very seriously. In this time and age, the importance of information security is very high and many methods and standards were created to help organizations improve their level of information security. In small organizations, problems occur due to the lack of knowledge and resources to manage risks efficiently. In the theoretical part of our thesis, we have presented the risks that threaten organizations in the field of information security in order to better understand the significance of information security, the standards concerning risk management, and we also touched on the use of recommended practices for managing risks in small organizations (having a security plan, creating appropriate safety barriers). In the research part of the thesis, we conducted an interview with the directors of a couple of small organizations to determine whether they are aware of the threats to their business, the way of managing risks, and providing information security, whether they had any security breaches so far, and whether they provide information security by following any of the standards or methods concerning information security. diplomske naloge upravljanje s tveganji informacijska varnost grožnje manjše organizacije risk management information security threats small organizations true true false [T. Zupanc] Slovenski jezik Angleški jezik Diplomsko delo/naloga 2018-08-23 07:41:13 2018-10-23 10:06:19 2022-08-01 21:06:25 2019-07-11 18:47:55 2018 0 Ljubljana 2018 Ljubljana VI, 45 str. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.056(043.2) 3622634 URN:SI:UM:DK:PHL4SELR UN_Zupanc_Toni_2018.pdf UN_Zupanc_Toni_2018.pdf 1 6E8BF626AD075B96EFADC40B0B7C32D2 6a210ad7cc40050b8fd06b5f5b870e113c415dcd1c43d890f85635d4b852c3da 64806830-7c10-11eb-bb7a-00155d0001ca 20.500.12556/dkum/3f7119be-12b1-4c2e-b87f-bf06abbb9233 https://dk.um.si/Dokument.php?lang=slv&id=130221 Fakulteta za varnostne vede 0 0 0