20.500.12556/DKUM-75010 Revizija informacijskega sistema v izbranem podjetju Information system auditing in chosen company Informacijski sistem je v današnjem tehnološko razvitem času za podjetje ključnega pomena. Vse prednosti, ki jih je prinesla računalniška in telekomunikacijska tehnologija so prinesle tudi vse večje možnosti zlorabe in dostopa do zaupnih podatkov. Zaradi naraščanja računalniškega kriminala, nesreč in napak posameznikov na delovnem mestu se morajo podjetja vedno bolj posvečati varnosti in zaščiti informacijskega sistema in ga redno tudi pregledovati. V ta namen se je oblikovala posebna veja revizije, ki se ukvarja s preverjanjem zanesljivosti, učinkovitosti ter varnosti informacijskih sitemov. V Sloveniji omenjena veja napreduje in vedno bolj združuje znanja revizorjev in informatikov. V magistrskem delu bomo predstavili pojem informacijskega sistema, njegove značilnosti ter vrste. Predstavili bomo pojem revizije informacijskega sistema in njene začetke v Sloveniji ter opisali primer sodne prakse pri zlorabi informacijskega sistema. Pri reviziji je potrebno slediti določenim zakonskim podlagam in etičnim pravilom, ki jih bomo posebej predstavili. Z vidika standardov so v nalogo vključeni standardi skupine ISO/IES 27000 ter metodologiji COBIT in ITIL. V zaključku bo predstavljen primer revizije informacijskega sistema v izbranem podjetju X, ki bo temeljil na standardu ISO 17799, kateri se osredotoča predvsem na informacijsko varnost. The information system is nowadays essential in the technological developed era for a company. All advantages the computer and telecommunication technology brought are also connected to bigger chances of abusing and access to secret data. Because of the growing number of computer criminal, accidents and mistakes of individuals at work, the company must be more aware of safety and protection of the information system and it should be checked regularly. Therefore it was established a special branch for revision which deals with checking responsibility, effectiveness and safety of the information system. In Slovenia the above mentioned branch improves and even more joins the knowledge of controllers and computer scientists. In my master's thesis the term information system is presented, its characteristics and types. The term revision of the information system and its beginnings in Slovenia will be presented and also an example of case law with the abuse of the information system. At revision it is important to follow specific legal basis and ethic rules which will be presented separately. From the point of view of standards are in the paper also included the standard groups ISO/IES 2700 and the methodology COBIT and ITIL. In the conclusion there will be presented a case of revision of the information system in a selected company X which will be based on the ISO standard 17799 that focuses on the information safety. revizija informacijski sistem varnost informacijskega sistema standardi ISO hierarhija pravil revision information system safety of the information system ISO standards hierarchy of rules true true false N. Pulko] Slovenski jezik Angleški jezik Magistrsko delo/naloga 2019-09-17 06:24:46 2019-11-25 12:12:49 2022-08-09 09:51:47 2019-12-10 08:18:09 2019 0 [Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 657.6 13462556 URN:SI:UM:DK:8WLIKMCS MAG_Pulko_Nina_2019.pdf MAG_Pulko_Nina_2019.pdf 1 AE9ECB2ACB3F68479A2FF87B2B7BCE43 e0039469e7212020312510be8885a05c50c18c5592e8e06d96392b483141399f fcea9b7f-7c10-11eb-bb7a-00155d0001ca 20.500.12556/dkum/5267b89f-d6de-46a8-b796-917d7513b26a https://dk.um.si/Dokument.php?lang=slv&id=138131 Ekonomsko-poslovna fakulteta 0 0 0