Ozaveščenost o informacijski varnosti pri delovanju z registri: v Direktoratu za upravne notranje zadeve, migracijo in naturalizacijo : magistrsko delo

Erzar, Klavdija

| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

First page > Show document

Show document

Title:	Ozaveščenost o informacijski varnosti pri delovanju z registri: v Direktoratu za upravne notranje zadeve, migracijo in naturalizacijo : magistrsko delo
Authors:	ID Erzar, Klavdija (Author) ID Bernik, Igor (Mentor) More about this mentor...
Files:	MAG_Erzar_Klavdija_2024.pdf (2,07 MB) MD5: 149048F9F03FD8466077DA4DC2A66912
Language:	Slovenian
Work type:	Master's thesis/paper
Typology:	2.09 - Master's Thesis
Organization:	FVV - Faculty of Criminal Justice and Security
Abstract:	Izvajanje informacijske varnosti je ena od bistvenih in kritičnih komponent za zagotavljanje neprekinjenega poslovanja vsake organizacije. Vedno večja odvisnost organizacij od informacijskih sistemov, tako v zasebnem kot javnem sektorju, od njih zahteva učinkovito obvladovanje tveganj v povezavi z njimi. Dandanes mnogim državnim institucijam to predstavlja velik izziv, saj imajo lahko ravno ta varnostna tveganja hude posledice. S tem mislimo ne samo na vpliv na zunanji ugled institucij javne uprave, ampak bi izguba ali kraja podatkov in informacij, ki jih na Direktoratu upravnih notranjih zadev, Direktoratu za migracijo in Direktoratu za naturalizacijo shranjujejo, obdelujejo in posredujejo, lahko predstavljala veliko grožnjo nacionalni varnosti. Eden od glavnih ciljev zaključnega dela je orisati področje informacijske varnosti na DUNZ-u, DM in Direktoratu za naturalizacijo. Pri tem nas je zanimala predvsem tamkajšnja ozaveščenost zaposlenih o informacijski varnosti pri delovanju z registri, ki jih vodijo. Prav tako smo želeli izvedeti, na kakšen način se izvajajo programi ozaveščenosti ter katerih ukrepov se za zagotavljanje varnosti informacij zaposleni na obravnavanih direktoratih poslužujejo. S pomočjo pol strukturiranih intervjujev smo pridobili vpogled v arhitekturo IS MNZ, ukrepe IV in ozaveščenost zaposlenih, ki je v splošnem po naših ugotovitvah zelo slaba. Zaradi slednjega bi bilo v prihodnosti potrebno posebno pozornost nameniti usposabljanjem zaposlenih, ki imajo po našem mnenju pri zagotavljanju učinkovite informacijske varnosti najpomembnejšo vlogo.
Keywords:	informacijska varnost, varnostna politika, tveganja, magistrska dela
Place of publishing:	Ljubljana
Place of performance:	Ljubljana
Publisher:	K. Erzar
Year of publishing:	2024
Year of performance:	2024
Number of pages:	X f., [75] str.
PID:	20.500.12556/DKUM-90401
UDC:	004.056(043.2)
COBISS.SI-ID:	209492995
Publication date in DKUM:	30.09.2024
Views:	266
Downloads:	81
Metadata:
Categories:	FVV
:	Copy citation

Average score:	(0 votes)
Your score:	Voting is allowed only for logged in users.
Share:

Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Licences

License:	CC BY-NC-ND 4.0, Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International

Link:	http://creativecommons.org/licenses/by-nc-nd/4.0/
Description:	The most restrictive Creative Commons license. This only allows people to download and share the work for no commercial gain and for no other purposes.
Licensing start date:	03.09.2024

Secondary language

Language:	English
Title:	Information security awareness in registry operations: in the Directorate for Administrative Internal Affairs, Migration and Naturalisation
Abstract:	Implementation of information security is one of the most essential and critical components in ensuring business continuity for any organisation outhere. The increasing dependence of organisations on information systems, both in the private and public sectors, requires them to effectively manage the risks associated with them. This is a major challenge for many public institutions today, as these security risks can have serious consequences. By those we mean not only the impact on the external reputation of public administration institutions, but the loss or theft of data and information stored, processed and transmitted by the Directorate of Administrative Internal Affairs, the Directorate of Migration and the Directorate of Naturalisation could pose a major threat to security on national level. One of the main objectives of the thesis is to outline the field of information security in the DAIA, the DM and the Directorate of Naturalisation. In this context, we were particularly interested in the awareness of the staff there about information security when dealing with the registers they manage. We also wanted to know how awareness programmes are implemented and what measures are taken to ensure information security by the employees of the directorates concerned. Through semi-structured interviews, we gained insight into the architecture of the Ministry of internal affairs, the information security measures and the awareness of employees, which we found to be generally very poor. This is why, in the future, special attention should be paid to the training of employees, who, in our view, play the most important role in ensuring effective information security.
Keywords:	information security, register, security policy, risk

Comments

Leave comment

You must log in to leave a comment.

Comments (0)

0 - 0 / 0

There are no comments!

Back