Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001

master's thesis

• Title (english): Improving the Security of the Business Environment by Implementing ISO 27001
• Author: Zoran Maleković
• Mentor: Dragan Peraković (mentor)
• Committee member: Marko Periša (predsjednik povjerenstva)
• Committee member: Ivan Cvitić (član povjerenstva)
• Committee member: Ivan Grgurević (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2020-09-24, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Norme niza ISO/IEC 27000, s naglaskom na normi ISO/IEC 27001:2013, daju smjernice i definiraju dobru praksu za dizajniranje, implementaciju i auditiranje Sustava upravljanja informacijskom sigurnosti (engl. Information Security Management Systems), s ciljem zaštite povjerljivosti, integriteta i dostupnosti informacija kojima raspolaže svaka organizacija. Sustav upravljanja informacijskom sigurnosti pomaže u zaštiti podataka, a temelji se na procjeni rizika i upravljanju rizikom pri čemu on nije samo skup tehničkih rješenja, već uključuje nadzor upravljanja i definiranje postupanja organizacije na svim razinama upravljanja informacijama. U radu se daje pregled zahtjeva norme ISO/IEC 27001:2013, objašnjavaju se ključni zahtjevi norme te se na primjeru organizacije koja se bavi razvojem poslovnih aplikacija koje plasira na strano tržište objašnjava proces uvođenja norme u poslovanje organizacije. Kroz ukazivanje na kritične faktore implementacije zahtjeva norme, ovaj rad ima za zadaću istaknuti ključne elemente čiji bi izostanak rezultirao neadekvatno i neučinkovito uspostavljenim sustavom upravljanja informacijskom sigurnosti.

Abstract (english)

ISO / IEC 27000 series of standards, with mainly ISO/IEC 27001: 2013, provide guidance and define good practice for the design, implementation and auditing of Information Security Management Systems, with the aim to protect confidentiality, integrity and availability of organization's information. The information security management system helps in data protection, and it is based on risk assessment and risk management, where it is not only a set of technical solutions, but also includes monitoring management and definition of the actions in the organization at all levels of information management. This paper provides an overview of the requirements of the ISO/IEC 27001:2013 standard, explains the key requirements of the standard and explains the process of implementation the standard in the organization 's business where the services example of roll model organization is develeopment of buisness applications. Through the outline of the critical factors of standard requirements implementations in business organization, this paper aims to to highlight the key elements whose absence would result in inadequately and inefficiently established information security management system.

• Keywords: ISO/IEC 27001:2013; Sustav upravljanja informacijskom sigurnosti; zaštita informacija; zahtjevi norme; implementacija zahtjeva
• Keywords (english): ISO/IEC 27001:2013; information security management system; information protection; standard requirements; implementation of requirements
• Language: croatian
• URN:NBN: urn:nbn:hr:119:151434
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2020-11-06 11:52:42