20.500.12556/DKUM-83545 Model varnostno-operativnega centra za slovensko policijo magistrsko delo Security operations center model of Slovenian police Informacijska tehnologija je vpeta v delovanje družbe bolj, kot je bila kadar koli prej. Prinesla je izjemen napredek, razvoj postaja nesluten. Vse to po drugi strani prinaša tudi nove izzive, ki jih do danes sploh nismo poznali. Kibernetski incidenti postajajo del našega vsakdana, včasih se celo zdi, da smo se z njimi že preveč sprijaznili. Kljub vsemu imajo organizacije v prvih bojnih črtah na voljo učinkovito orožje, to so varnostno-operativni centri (VOC). V zadnjih letih postajajo pomemben člen obvladovanja tveganj, ne le z vidika informacijske varnosti, pač pa tudi z vidika varnosti poslovanja in obstoja organizacij. Tega se zaveda tudi Slovenska policija, ki je zaradi zakonskih obvez kot tudi potreb vzpostavila svoj VOC. Izjemen porast uničujočih posledic, kompleksnosti in števila kibernetskih incidentov sili vsak VOC v nenehno prilagajanje, kar zahteva veliko naporov, znanja in sredstev. VOC policije ni pri tem nobena izjema. Operativno deluje skoraj dve leti in zato potrebuje nadgradnjo vseh treh osnovnih gradnikov, to so tehnologije, predvsem pa osebja in procesov. V ta namen smo na podlagi predpisov, referenčne literature, standardov, dobrih praks, ogrodij in smernic pripravili in verificirali model VOC, ki v skladu z najnovejšimi praksami definira vse omenjene gradnike. Da bi model dobil še večjo kredibilnost, smo v naslednjem koraku v cilju validacije prosili vodje VOC treh zelo uglednih slovenskih podjetjih za mnenja, ki smo jih zatem vgradili v model kot izboljšave. Kot pomoč pri implementaciji izboljšav v VOC policije smo prav tako z metodo verifikacije in validacije razvili še model ocene zrelosti z analizo razkoraka. Model bo v prvi fazi uporabljen za oceno trenutnega stanja vseh gradnikov VOC policije. V naslednjem koraku bo izvedena primerjava z željenim stanjem, ki bo ugotovila razkorak in zatem služila kot osnova za pripravo predlogov izboljšav in izvedbo akcijskega načrta. Information technology has become paramount part of our society more than it had been ever before. We are facing incredible progress, development has skyrocketed. This however, brought new issues that were not known to us by now. Cyber incidents became part of our lives, it even seems that we tolerate them more than we may. Regardless, organizations incorporated effective weapon to fight Cyber Incidents and provide, not only information, but also business and organization security and existence - these are Cyber Operation Centers (SOC). The benefit of SOC has been recognized by Slovenian Police as well. Beside the needs, Slovenian Police is above all obliged to establish its own SOC. Constant grow and complexity of cyber incidents are pushing organizations to adapt their SOCs, investing huge efforts, resources and knowledge. Slovenian police SOC has been operating for almost two years now hence it requires upgrading its three main building blocks, technology, and particularly people and processes. Based on legislation, reference literature, standards, good practices and frameworks, we have developed and verified model of SOC capabilities. To increase model credibility even more, we validated it employing three SOC managers from high ranked Slovenian companies. Additionally, to provide implementation the latter we developed maturity assessment model with gap analysis facilitating validation and verification methods. The model will be employed to help assessing the current state of VOC capabilities and compared with the desired state. In the next steps, gap analysis will be conducted to determine the gaps and to provide requirements for the last phase which will be the action plan execution in order to implement identified improvements. varnostno-operativni center odzivanje na incidente kibernetska varnost analiza razkoraka ocena zrelosti magistrske naloge security operations center incident response cyber security gap analysis maturity assessment true true false G. Rolih Slovenski jezik Angleški jezik Magistrsko delo/naloga 2022-12-17 21:51:44 2023-01-05 11:01:10 2023-01-06 10:33:22 0000-00-00 00:00:00 2022 0 Ljubljana 2022 Ljubljana IX f., 107 str. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 351.741(043.2) 136315651 MAG_Rolih_Gorazd_2022.pdf MAG_Rolih_Gorazd_2022.pdf 1 4EE9FAA141C7AEB8BEC3E3B9D15F68EB 59db044662889c61afacb45dddd36cc05b49e57346d124a90b87d2e6ae06a01e 411a3f7e-85cb-11ed-9cdd-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=164999 Fakulteta za varnostne vede 0 0 0