prikaz prve stranice dokumenta Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001
  Download
PDF 1.54 MB
master's thesis
Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001
Zagreb: University of Zagreb, Faculty of Transport and Traffic Sciences, 2020. urn:nbn:hr:119:151434
Maleković, Zoran
University of Zagreb
Faculty of Transport and Traffic Sciences
Division of Transport
Department of Information and Communications Traffic

Institutional repository: Faculty of Transport and Traffic Sciences

Cite this document

Maleković, Z. (2020). Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001 (Master's thesis). Zagreb: University of Zagreb, Faculty of Transport and Traffic Sciences. Retrieved from https://urn.nsk.hr/urn:nbn:hr:119:151434

Maleković, Zoran. "Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001." Master's thesis, University of Zagreb, Faculty of Transport and Traffic Sciences, 2020. https://urn.nsk.hr/urn:nbn:hr:119:151434

Maleković, Zoran. "Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001." Master's thesis, University of Zagreb, Faculty of Transport and Traffic Sciences, 2020. https://urn.nsk.hr/urn:nbn:hr:119:151434

Maleković, Z. (2020). 'Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001', Master's thesis, University of Zagreb, Faculty of Transport and Traffic Sciences, accessed 02 October 2024, https://urn.nsk.hr/urn:nbn:hr:119:151434

Maleković Z. Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001 [Master's thesis]. Zagreb: University of Zagreb, Faculty of Transport and Traffic Sciences; 2020 [cited 2024 October 02] Available at: https://urn.nsk.hr/urn:nbn:hr:119:151434

Z. Maleković, "Unaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001", Master's thesis, University of Zagreb, Faculty of Transport and Traffic Sciences, Zagreb, 2020. Available at: https://urn.nsk.hr/urn:nbn:hr:119:151434

Metadata
TitleUnaprjeđenje sigurnosti poslovnog okruženja implementacijom norme ISO 27001
Title (english)Improving the Security of the Business Environment by Implementing ISO 27001
AuthorZoran Maleković
MentorDragan Peraković (mentor)
Committee memberMarko Periša (predsjednik povjerenstva)
Committee memberIvan Cvitić (član povjerenstva)
Committee memberIvan Grgurević (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Transport and Traffic Sciences
(Division of Transport)
(Department of Information and Communications Traffic)
Zagreb
Defense date and country2020-09-24, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Traffic and Transport Technology
Postal and Telecommunications Traffic
Abstract
Norme niza ISO/IEC 27000, s naglaskom na normi ISO/IEC 27001:2013, daju smjernice i definiraju dobru praksu za dizajniranje, implementaciju i auditiranje Sustava upravljanja informacijskom sigurnosti (engl. Information Security Management Systems), s ciljem zaštite povjerljivosti, integriteta i dostupnosti informacija kojima raspolaže svaka organizacija. Sustav upravljanja informacijskom sigurnosti pomaže u zaštiti podataka, a temelji se na procjeni rizika i upravljanju rizikom pri čemu on nije samo skup tehničkih rješenja, već uključuje nadzor upravljanja i definiranje postupanja organizacije na svim razinama upravljanja informacijama. U radu se daje pregled zahtjeva norme ISO/IEC 27001:2013, objašnjavaju se ključni zahtjevi norme te se na primjeru organizacije koja se bavi razvojem poslovnih aplikacija koje plasira na strano tržište objašnjava proces uvođenja norme u poslovanje organizacije. Kroz ukazivanje na kritične faktore implementacije zahtjeva norme, ovaj rad ima za zadaću istaknuti ključne elemente čiji bi izostanak rezultirao neadekvatno i neučinkovito uspostavljenim sustavom upravljanja informacijskom sigurnosti.
Abstract (english)
ISO / IEC 27000 series of standards, with mainly ISO/IEC 27001: 2013, provide guidance and define good practice for the design, implementation and auditing of Information Security Management Systems, with the aim to protect confidentiality, integrity and availability of organization's information. The information security management system helps in data protection, and it is based on risk assessment and risk management, where it is not only a set of technical solutions, but also includes monitoring management and definition of the actions in the organization at all levels of information management. This paper provides an overview of the requirements of the ISO/IEC 27001:2013 standard, explains the key requirements of the standard and explains the process of implementation the standard in the organization 's business where the services example of roll model organization is develeopment of buisness applications. Through the outline of the critical factors of standard requirements implementations in business organization, this paper aims to to highlight the key elements whose absence would result in inadequately and inefficiently established information security management system.
Keywords
Keywords (english)
Languagecroatian
URN:NBNurn:nbn:hr:119:151434
Study programmeTitle: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport
Course: Road Traffic and Transport
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
Type of resourceText
File originBorn digital
Access conditionsOpen access
Terms of useLicence In copyright icon
Created on2020-11-06 11:52:42