Upravljanje informacijskom sigurnosti u logističkim sustavima

master's thesis

• Title (english): Information Risk Management in Logistics Systems
• Author: Nikolina Živković
• Mentor: Pero Škorput (mentor)
• Committee member: Edouard Ivanjko (predsjednik povjerenstva)
• Committee member: Ivona Bajor (član povjerenstva)
• Committee member: Tomislav Rožić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Intelligent Transport Systems and Logistics); (Department of Intelligent Transport Systems); Zagreb
• Defense date and country: 2021-09-22, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Intelligent Transport Systems and Logistics

Abstract

Upravljanje informacijskom sigurnosti u logističkim sustavima u današnje vrijeme nije lako. Uz razne potencijalne rizike za sigurnost informacija i cjelokupnog informacijskog sustava koji proizlaze iz ranjivosti sustava koji u izvor potencijalnih prijetnji i napada na sustav, rukovodstvo logističkog poduzeća ima glavnu ulogu u određivanju kako i na koji način što bolje zaštiti svoj informacijski sustav. Također, postoji i proces procjene rizika koji se može provesti nad informacijskim sustavom kako bi se identificirale sve ranjivosti i prijetnje sustava, te ocijenio koliki rizik predstavljaju za sustav i informacije u sustavu, te se na kraju daju preporučene sigurnosne kontrole čijom primjenom bi se rizik mogao smanjiti na prihvatljivu razinu. Nakon provedbe procesa procjene rizika, rukovodstvo logističkog poduzeća kreće u proces ublažavanja rizika gdje će pomoću analize isplativosti odrediti koje od preporučenih sigurnosnih kontrola su isplative za njihov sustav te će se te sigurnosne kontrole primijeniti i implementirati u njihov informacijski sustav poduzeća kako bi ublažile rizik, a ostale neće.

Abstract (english)

Managing information security in logistics systems nowdays is not easy. In addition to the various potential risks to the security of information and the entire information system arising from the vulnerability of the system to the source of potential threats and attacks on the system, the management of the logistics company has a major role in determining how and in a which way better protect their information system. There is also a risk assessment process that can be performed on the information system to identify all vulnerabilities and threats to the system, and assess how much risk they pose to the system and information in the system, and finally provide recommended security controls whose application could reduce the risk to an acceptable level. After implementing the risk assessment process, the management of the logistics company embarks on a risk mitigation process where they will use cost-benefit analysis to determine which of the recommended security controls are cost-effective for their system and which are not.

• Keywords: sigurnost informacijskog sustava; informacijski sustavi; rizik; analiza rizika; aktivnosti upravljanja rizikom; sigurnosne kontrole; ranjivosti informacijskih sustava; prijetnje informacijskim sustavima
• Keywords (english): Information system security; Information systems; Risk; Risk analysis; Risk Management activities; security controls; Vulnerabilities of Information systems; Threats to Information systems
• Language: croatian
• URN:NBN: urn:nbn:hr:119:190005
• Study programme: Title: Intelligent Transport Systems and Logistics; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2021-10-29 11:41:04