VZPOSTAVITEV SISTEMA ZA UPRAVLJANJE VAROVANJA INFORMACIJ V PODJETJU DRAVSKE ELEKTRARNE MARIBOR

Jeznik, Nina

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	VZPOSTAVITEV SISTEMA ZA UPRAVLJANJE VAROVANJA INFORMACIJ V PODJETJU DRAVSKE ELEKTRARNE MARIBOR
Authors:	ID Jeznik, Nina (Author) ID Bobek, Samo (Mentor) More about this mentor...
Files:	UNI_Jeznik_Nina_2011.pdf (1,37 MB) MD5: B7297C4CDB8C9A3F5D3F13BDF67DBF52 PID: 20.500.12556/dkum/b577a5f9-0e8e-4f28-8f75-244db6c26b7a
Language:	Slovenian
Work type:	Final seminar paper
Organization:	EPF - Faculty of Business and Economics
Abstract:	Vsako podjetje posluje s pomočjo informacijskega sistema, kateri je neprestano v nevarnosti, če ne poskrbimo za njegovo dobro zaščito. Informacije predstavljajo ključni del poslovanja podjetja in zahtevajo potrebo po celovitosti, razpoložljivosti in zaupnosti. Prvi del dela diplomskega seminarja je teoretičen in zajema vprašanje zakaj je potrebno informacije sploh varovati, kako upravljamo z informacijami, kateri standardi nam priporočajo dobre prakse s področja varovanja informacij, podroben opis družine standardov ISO/IEC 27000 ter proces vzpostavitve sistema upravljanja varovanja informacij in njegove prednosti. Drugi praktičen del dela diplomskega seminarja prikazuje vzpostavitev sistema upravljanja varovanja informacij na konkretnem primeru podjetja Dravskih elektrarn Maribor, ki so določile začasno projektno organizacijo z namenom projekta uvedbe SUVI. Skozi postopek vzpostavitve opisujem proces SUVI od priprave dokumentacije, popisa informacijskih sredstev, določanja groženj in ranljivosti, kontrol za zmanjšanje tveganja, notranje in zunanje presoje ter do pridobitve certifikata.
Keywords:	ISO/IEC 27001, informacijska varnost, varnostna politika, standardi varovanja informacij, SUVI
Place of publishing:	Maribor
Publisher:	[N. Jeznik]
Year of publishing:	2011
PID:	20.500.12556/DKUM-20286
UDC:	659.2:004
COBISS.SI-ID:	10852892
NUK URN:	URN:SI:UM:DK:CJZT8SAY
Publication date in DKUM:	24.11.2011
Views:	2717
Downloads:	399
Metadata:
Categories:	EPF
:	Copy citation

Average score:	(1 vote)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:	English
Title:	IMPLEMENTATION OF INFORMATION SECURITY MANAGEMENT SYSTEM IN COMPANY DRAVSKE ELEKTRARNE MARIBOR
Abstract:	Each company operates through the informational system, which is constantly at risk if they are not provided with good protection. Information is the main part of the company and requires integrity, availability and confidentiality needs. The first part of the graduate seminar contains theoretical basics and covers questions why the information are required to be protected, how to manage with the information, which standards recommend us good practices in information security, details about the ISO 21000 family of standards and the process of implementation information security management system and its benefits. The second part is practical and shows the establishment of information security management system with concrete example of the Drava power plant Maribor Company (Dravske elektrarne Maribor). They have set a temporary project organization for the purpose of the project to introduce information security management system. Throughout the procedure of reestablishment I described ISMS (information Security Management System). I represented it from preparation of documentation; informational means inventory, identifying threats and vulnerabilities, risk reduction controls, internal and external judgments to certificate acquirement.
Keywords:	ISO/IEC 27001, information security, security policy, security standards, Information Security Management System

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back