20.500.12556/DKUM-95639 Presoja skladnosti s standardom ISO/IEC 27001:2022 v srednje velikem proizvodnem podjetju Assessment of compliance with the ISO/IEC 27001:2022 standard in a medium-sized production company Diplomsko delo obravnava presojo skladnosti srednje velikega proizvodnega podjetja z zahtevami standarda ISO/IEC 27001:2022. Namen dela je bil ugotoviti, v kolikšni meri je podjetje že uskladilo svoje procese z zahtevami sistema upravljanja informacijske varnosti SUIV (angl. Information Security Managment System – ISMS), ter prepoznati področja, ki zahtevajo izboljšave. Presoja je bila izvedena s pomočjo vprašalnika, ki zajema klavzule 4–10 in kontrolne ukrepe iz Priloge A standarda ISO/IEC 27001:2022. Analiza je pokazala, da podjetje že uporablja posamezne varnostne ukrepe, vendar ti niso sistematično dokumentirani niti formalizirani. Pomanjkljivosti se kažejo predvsem pri obvladovanju tveganj, politiki informacijske varnosti in vlogi vodstva pri formalni zavezanosti k izpolnjevanju zahtev standarda, ki ga obravnavamo. Na podlagi ugotovitev so podani konkretni predlogi za izboljšave. The thesis examines the compliance of a medium-sized production company with the requirements of the ISO/IEC 27001:2022 standard. The purpose of the task was to determine the extent to which the company has already aligned its processes with the requirements of the information security management system. Information Security Management System (ISMS) and identify areas that require improvement. The assessment was conducted using a questionnaire that covers clauses 4–10 and control measures from Annex A of the ISO/IEC 27001:2022 standard. Analysis of the results showed that the company already uses individual security measures, but these are not systematically documented or formalized. The shortcomings are mainly evident in risk management, information security policy, and the role of management in formally committing to meeting the requirements of the standard we are discussing. Based on the findings, specific proposals for improvements are provided. informacijska varnost sistem upravljanja informacijske varnosti SUIV ISO/IEC 27001:2022 presoja skladnosti proizvodno podjetje information security information security management system ISMS ISO/IEC 27001:2022 compliance assessment production company true true false Slovenski jezik Angleški jezik Diplomsko delo/naloga 2025-10-03 10:05:54 2025-12-23 15:45:26 2025-12-24 03:19:34 0000-00-00 00:00:00 2025 0 Kranj 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 262809859 UN_Kristanc_Ana_2025.pdf UN_Kristanc_Ana_2025.pdf 1 4F7E28879432E270E681FC76E431BBC9 fc297ce100a5f9dc906621ecf078928ea893d5da9c56a0473cdf6d0e199f829f 47e08626-a032-11f0-93a2-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=199559 Fakulteta za organizacijske vede 0 0 0