prikaz prve stranice dokumenta Revizija informacijskih sustava primjenom norme ISO 27001
Access restricted to students and staff of home institution
master's thesis
Revizija informacijskih sustava primjenom norme ISO 27001
Zagreb: University of Zagreb, Faculty of Economics and Business, 2022. urn:nbn:hr:148:747277
Mitrović, Matea
University of Zagreb
Faculty of Economics and Business
Department of Informatics

Institutional repository: REPEFZG

Cite this document

Mitrović, M. (2022). Revizija informacijskih sustava primjenom norme ISO 27001 (Master's thesis). Zagreb: University of Zagreb, Faculty of Economics and Business. Retrieved from https://urn.nsk.hr/urn:nbn:hr:148:747277

Mitrović, Matea. "Revizija informacijskih sustava primjenom norme ISO 27001." Master's thesis, University of Zagreb, Faculty of Economics and Business, 2022. https://urn.nsk.hr/urn:nbn:hr:148:747277

Mitrović, Matea. "Revizija informacijskih sustava primjenom norme ISO 27001." Master's thesis, University of Zagreb, Faculty of Economics and Business, 2022. https://urn.nsk.hr/urn:nbn:hr:148:747277

Mitrović, M. (2022). 'Revizija informacijskih sustava primjenom norme ISO 27001', Master's thesis, University of Zagreb, Faculty of Economics and Business, accessed 26 June 2024, https://urn.nsk.hr/urn:nbn:hr:148:747277

Mitrović M. Revizija informacijskih sustava primjenom norme ISO 27001 [Master's thesis]. Zagreb: University of Zagreb, Faculty of Economics and Business; 2022 [cited 2024 June 26] Available at: https://urn.nsk.hr/urn:nbn:hr:148:747277

M. Mitrović, "Revizija informacijskih sustava primjenom norme ISO 27001", Master's thesis, University of Zagreb, Faculty of Economics and Business, Zagreb, 2022. Available at: https://urn.nsk.hr/urn:nbn:hr:148:747277

Metadata
TitleRevizija informacijskih sustava primjenom norme ISO 27001
Title (english)Information system auditing using ISO 27001 standard
AuthorMatea Mitrović
MentorMario Spremić (mentor)
Committee memberIvan Strugar (predsjednik povjerenstva)
Committee memberBoris Tušek (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Economics and Business
(Department of Informatics)
Zagreb
Defense date and country2022-09-26, Croatia
Scientific / art field,
discipline and subdiscipline		SOCIAL SCIENCES
Economics
Business Informatics
Abstract
U ovom radu, uz pojmovno određenje, opisana je i važnost zaštite informacija i informacijskih sustava, obzirom na sve brojnije hakerske napade, te značaj provedbe revizije informacijskih sustava u poslovanju. Opisani su ciljevi i postupci provedbe revizije informacijskih sustava, te najčešće korišteni standardi i okviri u području revizije informacijskih sustava. Poseban naglasak stavljen je na standard ISO 27001, koji na sveobuhvatan način utvrđuje najvažnija područja informacijske sigurnosti uz procjenu rizika, kao ključni parametar za donošenje odluka i provođenje sigurnosnih mjera. U praktičnom dijelu rada provedeni su postupci testiranje implementiranih kontrola u poduzeću XYZ d.o.o., koji posjeduje certifikat norme ISO/IEC 27001, te su dane preporuke za poboljšanje postojećeg stanja.
Abstract (english)
In addition to conceptual definition, this paper also describes the importance of protecting information and information systems, given the increasing number of hacker attacks, and the significance of auditing information systems in business. The objectives and procedures of information systems audits are described, as well as the most commonly used standards and frameworks in the field of information systems audits. Special emphasis is placed on the ISO 27001 standard, which comprehensively defines the key areas of information security along with risk assessment, as a key parameter for decision-making and the implementation of security measures. In the practical work section, the procedures for testing the implemented controls in the company XYZ d.o.o., which has an ISO/IEC 27001 certificate, were carried out, and recommendations were given for improving the current situation.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:148:747277
Study programmeTitle: Business Economics
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra ekonomije (magistar/magistra ekonomije)
Type of resourceText
File originBorn digital
Access conditionsAccess restricted to students and staff of home institution
Terms of useLicence In copyright icon
Created on2022-09-27 13:54:13