Informacijska varnostna politika Univerze v Mariboru : magistrsko delo

Kralj, Robert

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	Informacijska varnostna politika Univerze v Mariboru : magistrsko delo
Authors:	ID Kralj, Robert (Author) ID Bernik, Igor (Mentor) More about this mentor...
Files:	MAG_Kralj_Robert_2013.pdf (496,97 KB) MD5: 9E8E5073AD7023E0EFED9770A85AD24B
Language:	Slovenian
Work type:	Master's thesis/paper
Typology:	2.09 - Master's Thesis
Organization:	FVV - Faculty of Criminal Justice and Security
Abstract:	Informacijska varnostna politika varuje organizacijo pred različnimi zunanjimi in notranjimi vplivi, ki bi lahko posegli v celovitost informacijskega sistema in s tem organizacije kot celote. V času naraščajočih in realnih varnostnih groženj, s katerimi se soočajo organizacije, predstavlja učinkovita varnostna politika pomemben element za stabilnost, varnost in nemoteno poslovanje organizacije. Grožnje ne ostajajo samo na papirju, ampak se odražajo v številnih posledicah za organizacijo, kot so finančne, posledice ki se nanašajo na ugled in dobro ime organizacije, motnje in onemogočanje poslovanja, preiskave incidentov terjajo veliko časa in denarja, težave s povrnitvijo v prejšnje stanje, nestabilnost organizacije, ki lahko v skrajnem primeru vodijo celo v propad organizacije. Informacijska varnostna politika predstavlja celovit načrt varovanja informacij in delovnih procesov v organizaciji. Opredeljuje tiste mehanizme, preko katerih se zagotovi ustrezen sistem varovanja in zgradita varen računalniški sistem in omrežje v podjetju. Univerza v Mariboru je druga največja in druga najstarejša Univerza v Sloveniji, saj na njej študira preko 20.000 študentov in zaposluje več kot 1700 ljudi. Tako velika organizacija ima zelo kompleksen informacijski sistem, ki potrebuje dobro varovanje, zato je sestava informacijske varnostne politike za Univerzo v Mariboru ključnega pomena. Informacijska varnostna politika Univerze v Mariboru mora temeljiti na glavnih standardih s področja informacijske varnosti. Najboljšo prakso predstavlja standard ISF ki predstavlja idejno zasnovo varnostne politike Univerze v Mariboru v tem magistrskem delu. ISF standard temelji na mednarodnih standardih ISO 27001 in ISO 27002. Predlog informacijske varnostne politike Univerze v Mariboru obsega vsa pomembna področja varovanja informacijskega sistema in informacij. Tako ureja varnostno upravljanje kjer opredeljuje vlogo vodstva, ključne poslovne aplikacije, omrežni del, strojno opremo, in okolje končnih uporabnikov, torej študentov, zaposlenih in drugih uporabnikov informacijskih storitev UM.
Keywords:	varnostna politika, informacijska varnost, računalniški centri, organizacije, Univerza v Mariboru, magistrska dela
Place of publishing:	[Ljubljana
Publisher:	R. Kralj]
Year of publishing:	2013
PID:	20.500.12556/DKUM-42180
UDC:	004.056(043.2)
COBISS.SI-ID:	2661354
NUK URN:	URN:SI:UM:DK:CQWOUYXB
Publication date in DKUM:	22.10.2013
Views:	2801
Downloads:	347
Metadata:
Categories:	FVV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:

English

Abstract:

Information security policy protects the organization from a variety of internal and external risks that could affect the integrity of the information system and the organization as a whole. In the time when real security threats are on the rise, implementing an effective security policy is an important element for the stability, safety and smooth operation of the organization. Threats do not remain only on paper, but can manifest in a number of consequences for the organization, such as financial, consequences concerning the reputation and good name of the organization, denial of service and disabling organizational processes, investigation of incidents requires lot of time and money, organizational instability, which in extreme cases can lead to the collapse of the company. Information Security Policy represents a comprehensive security plan for the information and work processes in the organization. It defines mechanisms which allow us to build a secure computer system and network in the company. University of Maribor, the second largest and second-oldest university in Slovenia, has more than 20,000 students and employs more than 1,700 people. Such a large organization has a very complex information system that needs good protection. Implementation of information security policy for the University of Maribor is therefore crucial. University of Maribor information security policy is based on the main world standards of information security. ISF standard presentes best practices for managing IT systems from a business perspective but also in a practical way. It represents the basis for University of Maribor information security policy in this thesis. ISF standard is based on international standards ISO 27001 and ISO 27002 for information security. Information Security Policy at the University of Maribor covers all important areas of information system security. It regulates safety management which defines the role of leadership, business-critical applications, network , hardware and end user environment.

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back