prikaz prve stranice dokumenta Vježbe za kibernetičke incidente u bankarskom sustavu
  Download
PDF 1.77 MB
professional thesis
Vježbe za kibernetičke incidente u bankarskom sustavu
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. urn:nbn:hr:168:611127
Jurčević, Mario
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Jurčević, M. (2023). Vježbe za kibernetičke incidente u bankarskom sustavu (Professional thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:611127

Jurčević, Mario. "Vježbe za kibernetičke incidente u bankarskom sustavu." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. https://urn.nsk.hr/urn:nbn:hr:168:611127

Jurčević, Mario. "Vježbe za kibernetičke incidente u bankarskom sustavu." Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2023. https://urn.nsk.hr/urn:nbn:hr:168:611127

Jurčević, M. (2023). 'Vježbe za kibernetičke incidente u bankarskom sustavu', Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 07 July 2024, https://urn.nsk.hr/urn:nbn:hr:168:611127

Jurčević M. Vježbe za kibernetičke incidente u bankarskom sustavu [Professional thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2023 [cited 2024 July 07] Available at: https://urn.nsk.hr/urn:nbn:hr:168:611127

M. Jurčević, "Vježbe za kibernetičke incidente u bankarskom sustavu", Professional thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2023. Available at: https://urn.nsk.hr/urn:nbn:hr:168:611127

Metadata
TitleVježbe za kibernetičke incidente u bankarskom sustavu
Title (english)Cyber incident exercise for the banking industry
AuthorMario Jurčević
MentorStjepan Groš (mentor)
Committee memberAnte Đerek (predsjednik povjerenstva)
Committee memberStjepan Groš (član povjerenstva)
Committee memberToni Perković (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2023, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Cilj ovog rada je definirati prijedlog procesa, scenarije i popratne materijale za provođenje vježbi odgovora na kibernetičke incidente u bankarskom sektoru. U okviru istraživanja za rad provedena je temeljita analiza postojećih praksi za vježbe odgovora na kibernetičke incidente, uključujući vrste vježbi, njihove ciljeve i metodologije. Rezultati istraživanja ukazuju na to da su vježbe odgovora na incidente ključni alat za unapređenje pripravnosti financijskih institucija u suočavanju s raznovrsnim prijetnjama. Zaključak je da priprema i definiranje relevantnog i realnog scenarija koristeći dijelove TIBER-EU okvira omogućava dobru pripremu za odgovor na incidente, što pridonosi bržoj i učinkovitijoj reakciji u slučaju stvarnih incidenata, smanjujući potencijalne gubitke i štetu. Ovaj će rad dati opće smjernice za planiranje, pripremu, razvoj i provođenje tih vježbi slijedeći važeće regulative i zakone kao i najbolje prakse u bankarskom sektoru, kako bi financijske institucije provođenjem vježbi unaprijedile proces odgovora na incidente. Također, u ovom su radu predloženi materijali koji se mogu koristiti prilikom pripreme i izvođenja vježbe, kao i konfiguracija vježbe u OpenEX simulatoru.
Abstract (english)
The goal of this specialist thesis is to suggest a process, templates and scenarios that can be used for execution of cybersecurity incident response exercises in the financial sector. A thorough analysis of current practices in cybersecurity incident response exercises was conducted as a part of research for this thesis, including types of exercises, their goals and methodologies. Results of this research clearly show that incident response exercises are a crucial process in the improvement of financial institution readiness to face various threats. Preparing and defining a relevant and realistic scenario based on TIBER-EU framework allows a well-rounded incident response, resulting in a faster and more efficient reaction with real incidents and reducing potential loss and damage. This specialist thesis defines guidelines for planning, development and exercise preparation based on relevant regulations and laws in banking sector. Financial institutions can use the information from this specialist thesis to test and improve cybersecurity incident management process. In addition, this specialist thesis lists materials that could be used in preparation and execution of exercises, as well as an exercise scenario file for OpenEX simulator.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:168:611127
Study programmeTitle: Specialist study programme in information security
Study programme type: university
Study level: postgraduate specialist
Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2024-05-03 11:43:09