| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font
First page > Show document

Show document Help

Title:Odločitveni model za prenos upravljanja informacijske varnosti na zunanje izvajalce : diplomsko delo univerzitetnega študijskega programa Varstvoslovje
Authors:ID Jelovčan, Luka (Author)
ID Prislan Mihelič, Kaja (Mentor) More about this mentor... New window
Files:.pdf UN_Jelovcan_Luka_2020.pdf (970,60 KB)
MD5: F5F869D47D36E3F0C1F385F1FD86D00D
PID: 20.500.12556/dkum/db9ed84c-e72e-48fa-9f9f-5465be809ee4
 
Language:Slovenian
Work type:Bachelor thesis/paper
Typology:2.11 - Undergraduate Thesis
Organization:FVV - Faculty of Criminal Justice and Security
Abstract:Zaradi širjenja trenda digitalizacije in informatizacije poslovnih procesov se organizacije soočajo s številnimi izzivi, med katerimi prevladujejo grožnje informacijski varnosti. Kljub pomembnosti informacijske varnosti za stabilno in nemoteno poslovanje pa se v praksi pri upravljanju tovrstnega področja organizacije soočajo s številnimi izzivi (npr. pomanjkanje finančnih, kadrovskih in tehničnih sredstev). Skladno s tem postaja prenos aktivnosti, povezanih z upravljanjem informacijske varnosti na zunanje izvajalce, vedno bolj aktualna praksa, vendar v Sloveniji to področje ostaja neraziskano. Prenos upravljanja informacijske varnosti sicer ne predstavlja primerne rešitve za vse organizacije, saj so s tem povezana tudi določena tveganja. Zato je za organizacije ključno, da izberejo način upravljanja informacijske varnosti, ki je za njih najbolj primeren. Pregled literature kaže, da sicer obstajajo odločitveni modeli za izbiro najprimernejših načinov k upravljanju informacijskih sistemov, vendar ti niso uporabni za odločanje o pristopih k upravljanju informacijske varnosti (tj. notranje/zunanje). V okviru izdelave diplomskega dela je bila izvedena trofazna empirična raziskava, ki je vključevala strukturiran pregled literature ter dve kvantitativni raziskavi med strokovnjaki s področja informacijske varnosti. Cilj raziskave je bil ugotoviti aktualno stanje na področju prenosa upravljanja informacijske varnosti na zunanje izvajalce v Sloveniji ter razviti odločitveni model uporaben za organizacije pri presojanju pristopov. Rezultati raziskave kažejo, da je v ponudbi zunanjih izvajalcev najbolj razširjena storitev informacijskovarnostno svetovanje, medtem ko slovenske organizacije po oceni respondentov najpogosteje koristijo storitev vzpostavljanja in vzdrževanja informacijskovarnostnih sistemov. Prenosa informacijske varnosti se poslužuje približno polovica slovenskih organizacij, najpogosteje pa velike organizacije. Po mnenju respondentov bi organizacije pri odločanju o načinu upravljanja informacijske varnosti največji poudarek morale nameniti hitremu odzivanju na grožnje in zagotavljanju neprekinjenega poslovanja. Rezultati raziskave so tako omogočili identifikacijo in prioritizacijo odločitvenih dejavnikov, ki bi morali vplivati na izbiro najprimernejšega načina upravljanja informacijske varnosti v organizacijah. Prav tako gre za prvo raziskavo v Sloveniji, ki je podrobneje proučila stanje na področju prenašanja aktivnosti, povezanih z informacijsko varnostjo na zunanje izvajalce.
Keywords:diplomske naloge, SUIV, prenos aktivnosti, zunanje izvajanje, organizacije, AHP, odločitveni model
Place of publishing:Ljubljana
Place of performance:Ljubljana
Publisher:[L. Jelovčan]
Year of publishing:2020
Year of performance:2020
Number of pages:V, 68 str.
PID:20.500.12556/DKUM-77187 New window
UDC:004.056(043.2)
COBISS.SI-ID:28858627 New window
NUK URN:URN:SI:UM:DK:LFWJEM8K
Publication date in DKUM:18.09.2020
Views:1123
Downloads:134
Metadata:XML DC-XML DC-RDF
Categories:FVV
:
Copy citation
  
Average score:(0 votes)
Your score:Voting is allowed only for logged in users.
Share:Bookmark and Share



Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Secondary language

Language:English
Title:Decision model for information security outsourcing
Abstract:With growing digitalisation and informatisation of business processes, organisations face different challenges, among which threats to information security prevail. Despite the importance of information security for business continuity in practice organisations are dealing with several issues in managing this area (e.g. lack of financial, human and technical resources). Accordingly, information security outsourcing is becoming an increasingly current practice, but in Slovenia this area remains underresearched. Moreover, information security outsourcing may not be the most efficient approach to managing information security for every organisation as there are also certain risks associated with it. That is why it is important for organisations to make an informed decision regarding which approach to information security is the most appropriate for them. A review of the literature shows that while there are several decision models for selecting the most appropriate ways to manage information systems, these are not useful for deciding on approaches to information security management (i.e. internal/external). A three-part empirical research, which included a structured literature review and two quantitative survey-based researches among information security professionals, was conducted. The aim of the research was to determine the current situation in the field of information security outsourcing in Slovenia and to develop a decision model useful for organisations in assessing approaches. The results of the research show that the most widespread service in the offer of service providers in Slovenia is information security consulting, while establishment and maintenance of information security systems is the most outsourced service. It is estimated that approximately half of Slovenian organisations outsource information security activities with bigger organisations outsourcing more often. According to the research findings, fast response to information security incidents and business continuity should be the most important decision factors when choosing between internal and outsourced approach to management of information security in organisations. The results of the research thus enabled the identification and prioritization of decision-making factors that should influence the selection of the most appropriate approach to information security management. It is also the first research in Slovenia that examined in more detail the situation in the field of outsourcing information security-related activities.
Keywords:ISMS, outsourcing, external provision, organisations, AHP, decision model


Comments

Leave comment

You must log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back
Logos of partners University of Maribor University of Ljubljana University of Primorska University of Nova Gorica