20.500.12556/DKUM-98137 Vpeljava in analiza vpliva NIS 2 direktive v poslovni proces izbranega podjetja magistrsko delo Implementation and impact analysis of the nis2 directive in the business process of the selected company V magistrski nalogi je bila obravnavana vpeljava zahtev evropske Direktive NIS 2 v izbrano podjetje in analiziran njen vpliv na poslovne procese. V uvodnem delu je bila predstavljena zakonodajna podlaga in razloženi ključni cilji direktive. Nato je bilo izvedeno ocenjevanje začetnega stanja kibernetske in informacijske varnosti, kjer je bilo ugotovljeno, da so bili postopki večinoma neformalni, infrastruktura zastarela, dokumentacija pomanjkljiva, ozaveščenost zaposlenih pa nizka. V nadaljevanju so bili opisani izvedeni ukrepi, kot so sistemski varnostni pregled, GAP analiza, priprava dokumentacije, povezava z varnostno-operativnim centrom in načrt posodobitve omrežja ter uvedba agregatov z UPS sistemi za zagotavljanje neprekinjenega poslovanja. Analizirani so bili stroški, pri čemer je bilo ugotovljeno, da implementacija predstavlja pomembno finančno breme, vendar prinaša dolgoročne koristi v obliki večje varnosti, zaupanja poslovnih partnerjev in konkurenčne prednosti. Vpliv na poslovne procese je bil prepoznan predvsem pri prodaji, nabavi, IT-oddelku in operativi, kjer so bili uvedeni novi postopki, evidence ter odgovornosti. Zaključeno je bilo, da vpeljava NIS 2 ni enkratna naloga, temveč proces stalnega prilagajanja, ki zahteva kombinacijo tehničnih ukrepov, organizacijskih sprememb in gradnje varnostne kulture. This master’s thesis addressed the implementation of the European NIS 2 Directive in a selected company and analyzed its impact on business processes. In the introductory part, the legislative framework and the key objectives of the directive were presented. An assessment of the initial state of cybersecurity and information security was carried out, showing that procedures were mostly informal, the infrastructure outdated, documentation insufficient, and employee awareness low. Subsequently, the measures undertaken were described, including a system security audit, a GAP analysis, preparation of documentation, connection to a security operations center, as well as the planned network upgrade and the introduction of generators and UPS systems to ensure business continuity. The costs of implementation were analyzed, and it was established that compliance requires considerable financial resources; however, long-term benefits are expected in the form of higher security, increased trust of business partners, and improved competitiveness. The impact on business processes was identified primarily in sales, procurement, IT, and operations, where new procedures, records, and responsibilities had to be introduced. It was concluded that the implementation of NIS 2 should not be viewed as a one-time task but as a continuous process that requires a combination of technical measures, organizational changes, and the establishment of a strong security culture.  NIS 2 direktiva vpeljava analiza izbrano podjetje delovni proces NIS 2 Directive implementation analysis selected company business process true true false A. Strelec Slovenski jezik Angleški jezik Magistrsko delo/naloga 2026-05-19 16:44:02 2026-07-08 11:41:03 2026-07-09 03:08:32 0000-00-00 00:00:00 2026 0 Ljubljana 2026 Ljubljana VII f., 68 str., [12] str. pril. 0000-00-00 Zaloznikova Objavljeno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 005.934:004.056(043.2) 284040963 MAG_Strelec_Anja_2026.pdf MAG_Strelec_Anja_2026.pdf 1 00C00D103C424D74121BAD2F7B572164 b9aa71c2bef91ed5ef350ee7e3c7b6636c4672f4a4398dacc6cabdd9552fcf56 0b823282-7932-11f1-80c7-00155d580e34 https://dk.um.si/Dokument.php?lang=slv&id=207937 Fakulteta za varnostne vede 0 0 0