MODEL SISTEMA ZA UPRAVLJANJE INFORMACIJSKE VARNOSTI V DRŽAVNI UPRAVI

Tomažič, Samo

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	MODEL SISTEMA ZA UPRAVLJANJE INFORMACIJSKE VARNOSTI V DRŽAVNI UPRAVI
Authors:	ID Tomažič, Samo (Author) ID Brezavšček, Alenka (Mentor) More about this mentor...
Files:	MAG_Tomazic_Samo_2012.pdf (2,75 MB) MD5: 6C7E27309D7ECE4792F277117F26DF94 PID: 20.500.12556/dkum/211ef680-5412-473f-b5c4-a0e60856ee44
Language:	Slovenian
Work type:	Master's thesis
Organization:	FOV - Faculty of Organizational Sciences in Kranj
Abstract:	V magistrskem delu je predstavljena zasnova modela sistema za upravljanje informacijske varnosti za slovensko državno upravo. Informacijski sistemi v državni upravi morajo namreč zaradi svoje ključne vloge, ki jo opravljajo, delovati brezhibno, saj ima lahko že majhen izpad hujše ekonomske ali drugovrstne posledice, ki jih državljani čutimo neposredno. V okviru sistematične vpeljave sistema za upravljanje informacijske varnosti (SUIV) v katerokoli organizacijo, se držimo štirih temeljnih faz po Demingovem krogu: načrtovanje – uvedba – preverjanje – ukrepanje (ang. Plan – Do – Check– Act); faz, ki jih uvaja standard ISO/IEC 27001:2005. Istih faz se drži tudi zasnovan model za slovensko državno upravo, na podlagi katerega se lahko informatiki ali zadolženi za informacijsko varnost, v katerem koli delu državne uprave, sistematično lotijo vpeljave SUIV tudi v praksi. Zasnova sledi metodologiji standarda ISO/IEC 27001:2005 in smernicam, ki jih podaja standard ISO/IEC 27003:2010. Model je nadalje apliciran v enega od organov v sestavi Ministrstva za okolje in prostor: v Upravo RS za jedrsko varnost. V aplikaciji modela je v celoti izvedena prva faza načrtovanja in vzpostavitve SUIV, ki vključuje pridobitev soglasja vodstva, določitev okvira SUIV, analizo tveganja ter pregled možnih varovalnih ukrepov in izdelavo ter sprejetje načrta s strani vodstva. Ostali trije koraki pri vzpostavitvi SUIV (uvedba, preverjanje in ukrepanje) so prikazani kot priporočila za nadaljnje delo organizacije.
Keywords:	informacijski sistem, varnost, upravljanje, SUIV, državna uprava
Place of publishing:	Maribor
Year of publishing:	2012
PID:	20.500.12556/DKUM-21863
COBISS.SI-ID:	7017747
NUK URN:	URN:SI:UM:DK:KT4G63HH
Publication date in DKUM:	28.05.2012
Views:	2553
Downloads:	231
Metadata:
Categories:	FOV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:	English
Title:	MODEL OF INFORMATION SECURITY MANAGEMENT SYSTEM IN PUBLIC ADMINISTRATION
Abstract:	The Master's thesis presents the design of the information security management system (ISMS) model for Slovenian public administration. Operation of the information systems in public administration must be flawless due to their critical role. Even a short system failure can result in serious economic loss or any other kind of consequences that affect the citizens directly. A systematic introduction of the ISMS into an organization is made in accordance with four basic phases of the Deming’s cycle: Plan - Do – Check – Act; the phases introduced by the standard ISO/IEC 27001:2005. These phases mean a basis in a hereby designed model for Slovenian public administration. The model that can be used as a guideline for IT or information security in any part of public administration to systematically introduce the ISMS in practice. The model design follows the methodology of ISO/IEC 27001:2005 and guidelines set by the standard ISO/IEC 27003:2010. The model is further applied in one of the agencies within public administration: the Slovenian Nuclear Safety Administration. The application of the model fully executes the first phase of planning and implementing the ISMS including: management concordance, definition of the ISMS’s framework, risk analysis, review of possible protective measures together with elaboration and admission of the plan by the management. The other three steps in establishing the ISMS (introduction, verification and measures taken) are presented as recommendations for future work in the organization.
Keywords:	information system, security, management, ISMS, public administration

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back