| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

Show document Help

Title:Državni notranji revizorji in varnost informacijskih sistemov : magistrsko delo
Authors:ID Berkopec, Janez (Author)
ID Bernik, Igor (Mentor) More about this mentor... New window
Files:.pdf MAG_Berkopec_Janez_2015.pdf (1,88 MB)
MD5: DB1CDF36BC67DFDFC6F63F7A786EAAA2
 
Language:Slovenian
Work type:Master's thesis/paper
Typology:2.09 - Master's Thesis
Organization:FVV - Faculty of Criminal Justice and Security
Abstract:Na področju informacijske tehnologije je edina stalnica to, da se vse stalno spreminja. Ni več organizacije, posebej pa ne v okviru državne uprave, ki ne uporablja informacijske tehnologije pri svojem poslovanju. Ker se stalno posodabljajo stari informacijski sistemi oziroma uvajajo novi, je treba posvetiti posebno pozornost delovanju notranjih kontrol na tem področju, saj le vzpostavljene in pravilno delujoče notranje kontrole na vseh področjih zagotavljajo, da so podatki pravilni in zanesljivi. Za pridobitev naziva preizkušen revizor informacijskih sistemov (v nadaljevanju: PRIS) pa je potrebno veliko predhodnega znanja in izkušenj na področju informacijskih sistemov, poleg tega je potrebno opraviti mednarodni izpit in izpit na Slovenskem inštitutu za revizijo. Državni notranji revizorji pri izobraževanju za pridobitev naziva državni notranji revizor (v nadaljevanju: DNR) ne pridobijo potrebnih znanj na področju informacijske tehnologije, ampak je izobraževanje bolj usmerjeno v nadzor notranjih kontrol na ostalih področjih poslovanja. V nalogi bodo podane glavne značilnosti pri izobraževanju za pridobitev naziva PRIS, to je katera področja je treba obvladovati pri opravljanju izpita, v nadaljevanju pa bo predstavljenih nekaj glavnih orodij za izvajanje revizij na področju informacijske tehnologije (v nadaljevanju: IT). V nadaljevanju bodo predstavljena področja izobraževanja za pridobitev DNR, iz katerih bo razvidno, da se področja IT zgolj dotakne v dveh poglavjih, sicer pa je dan večji poudarek na notranjih kontrolah ostalih področji poslovanja. S to nalogo bo prikazano, kako velike so razlike med izobraževanjem za pridobitev naziva PRIS in DNR, nato pa, da je znanje za revidiranje IS, ki ga pridobijo DNR z upoštevanjem smernic, ki jih objavlja združenje notranjih revizorjev, zadostno za izvajanje splošnih IT revizij. Za izvajanje bolj poglobljenih IT revizij oziroma za revidiranje posameznih področij znotraj informacijskih sistemov pa je to znanje premajhno, zato je priporočljivo, da se vključi v to revizijo revizorja informacijskih sistemov, v ekipo ki bo izvajala revizijo. V drugem delu bosta bolj podrobno predstavljeni dve smernici, ki bosta uporabljeni tudi kot podlaga za pripravo načrta notranje revizije na področju IT.
Keywords:informacijski sistemi, revizije, revizorji, varnost, informacijska varnost, magistrska dela
Place of publishing:[Ljubljana
Place of performance:[Ljubljana
Publisher:J. Berkopec]
Year of publishing:2015
Year of performance:2015
Number of pages:102 str.
PID:20.500.12556/DKUM-47565-e7357ac5-b304-48a2-72c7-6132ab94f0fb New window
UDC:004.056(043.2)
COBISS.SI-ID:2955498 New window
NUK URN:URN:SI:UM:DK:26TVQP33
Publication date in DKUM:22.04.2015
Views:2066
Downloads:467
Metadata:XML DC-XML DC-RDF
Categories:FVV
:
Copy citation
  
Average score:(0 votes)
Your score:Voting is allowed only for logged in users.
Share:Bookmark and Share



Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:English
Abstract:On the field of information technology, only one thing is certain that everything is constantly changing. All organizations especially in the public sector is using information technology in day-to-day business. Old systems are constantly updating and new ones are taking in place, so working internal controls must be one of the priorities, because only properly working internal controls on all levels gives assurance that data are correct and reliable. To get a title tested information system auditor you need a lot of knowledge and experience in the field of information systems, successfully finished international exam and take additional exams at Slovenian audit institute. When employees are preparing to get a title state internal auditor, they do not get knowledge in the field of information technology, because education is focused more on how to audit internal controls in all other fields of business. In this paper will be laid out main feature of education for tested information system auditor, which fields must be understood when taking the exam an present some main tools for conducting audits of information systems. Next will be presented fields of education for state internal auditor from which will be clear that except in two topics, the field of information technology is not mentioned and the main emphasis is on all other fields of business. This paper will show how big is the difference between both mentioned educations and that the knowledge, the state internal auditor acquire by using guidelines published by institute of internal auditors, is adequate to perform general audits of information systems. For special audits of information systems or auditing special fields of information systems, that knowledge is no enough, so it is recommended to include auditor of information systems as a part of an audit team. In the second part, two guidelines will be presented more detailed and present how can be used as a template for a plan to conduct internal audit in a field of information systems.


Comments

Leave comment

You must log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back
Logos of partners University of Maribor University of Ljubljana University of Primorska University of Nova Gorica