| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

Show document Help

Title:Model varnostno-operativnega centra za slovensko policijo : magistrsko delo
Authors:ID Rolih, Gorazd (Author)
ID Bernik, Igor (Mentor) More about this mentor... New window
Files:.pdf MAG_Rolih_Gorazd_2022.pdf (2,54 MB)
MD5: 4EE9FAA141C7AEB8BEC3E3B9D15F68EB
 
Language:Slovenian
Work type:Master's thesis/paper
Typology:2.09 - Master's Thesis
Organization:FVV - Faculty of Criminal Justice and Security
Abstract:Informacijska tehnologija je vpeta v delovanje družbe bolj, kot je bila kadar koli prej. Prinesla je izjemen napredek, razvoj postaja nesluten. Vse to po drugi strani prinaša tudi nove izzive, ki jih do danes sploh nismo poznali. Kibernetski incidenti postajajo del našega vsakdana, včasih se celo zdi, da smo se z njimi že preveč sprijaznili. Kljub vsemu imajo organizacije v prvih bojnih črtah na voljo učinkovito orožje, to so varnostno-operativni centri (VOC). V zadnjih letih postajajo pomemben člen obvladovanja tveganj, ne le z vidika informacijske varnosti, pač pa tudi z vidika varnosti poslovanja in obstoja organizacij. Tega se zaveda tudi Slovenska policija, ki je zaradi zakonskih obvez kot tudi potreb vzpostavila svoj VOC. Izjemen porast uničujočih posledic, kompleksnosti in števila kibernetskih incidentov sili vsak VOC v nenehno prilagajanje, kar zahteva veliko naporov, znanja in sredstev. VOC policije ni pri tem nobena izjema. Operativno deluje skoraj dve leti in zato potrebuje nadgradnjo vseh treh osnovnih gradnikov, to so tehnologije, predvsem pa osebja in procesov. V ta namen smo na podlagi predpisov, referenčne literature, standardov, dobrih praks, ogrodij in smernic pripravili in verificirali model VOC, ki v skladu z najnovejšimi praksami definira vse omenjene gradnike. Da bi model dobil še večjo kredibilnost, smo v naslednjem koraku v cilju validacije prosili vodje VOC treh zelo uglednih slovenskih podjetjih za mnenja, ki smo jih zatem vgradili v model kot izboljšave. Kot pomoč pri implementaciji izboljšav v VOC policije smo prav tako z metodo verifikacije in validacije razvili še model ocene zrelosti z analizo razkoraka. Model bo v prvi fazi uporabljen za oceno trenutnega stanja vseh gradnikov VOC policije. V naslednjem koraku bo izvedena primerjava z željenim stanjem, ki bo ugotovila razkorak in zatem služila kot osnova za pripravo predlogov izboljšav in izvedbo akcijskega načrta.
Keywords:varnostno-operativni center, odzivanje na incidente, kibernetska varnost, analiza razkoraka, ocena zrelosti, magistrske naloge
Place of publishing:Ljubljana
Place of performance:Ljubljana
Publisher:G. Rolih
Year of publishing:2022
Year of performance:2022
Number of pages:IX f., 107 str.
PID:20.500.12556/DKUM-83545 New window
UDC:351.741(043.2)
COBISS.SI-ID:136315651 New window
Publication date in DKUM:05.01.2023
Views:1199
Downloads:271
Metadata:XML DC-XML DC-RDF
Categories:FVV
:
Copy citation
  
Average score:(0 votes)
Your score:Voting is allowed only for logged in users.
Share:Bookmark and Share



Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Licences

License:CC BY-NC-ND 4.0, Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International
Link:http://creativecommons.org/licenses/by-nc-nd/4.0/
Description:The most restrictive Creative Commons license. This only allows people to download and share the work for no commercial gain and for no other purposes.
Licensing start date:17.12.2022

Secondary language

Language:English
Title:Security operations center model of Slovenian police
Abstract:Information technology has become paramount part of our society more than it had been ever before. We are facing incredible progress, development has skyrocketed. This however, brought new issues that were not known to us by now. Cyber incidents became part of our lives, it even seems that we tolerate them more than we may. Regardless, organizations incorporated effective weapon to fight Cyber Incidents and provide, not only information, but also business and organization security and existence - these are Cyber Operation Centers (SOC). The benefit of SOC has been recognized by Slovenian Police as well. Beside the needs, Slovenian Police is above all obliged to establish its own SOC. Constant grow and complexity of cyber incidents are pushing organizations to adapt their SOCs, investing huge efforts, resources and knowledge. Slovenian police SOC has been operating for almost two years now hence it requires upgrading its three main building blocks, technology, and particularly people and processes. Based on legislation, reference literature, standards, good practices and frameworks, we have developed and verified model of SOC capabilities. To increase model credibility even more, we validated it employing three SOC managers from high ranked Slovenian companies. Additionally, to provide implementation the latter we developed maturity assessment model with gap analysis facilitating validation and verification methods. The model will be employed to help assessing the current state of VOC capabilities and compared with the desired state. In the next steps, gap analysis will be conducted to determine the gaps and to provide requirements for the last phase which will be the action plan execution in order to implement identified improvements.
Keywords:security operations center, incident response, cyber security, gap analysis, maturity assessment


Comments

Leave comment

You must log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back
Logos of partners University of Maribor University of Ljubljana University of Primorska University of Nova Gorica