Upravljanje rizikom u području informacijske sigurnosti

undergraduate thesis

• Title (english): Risk Management in the Field of Information Security
• Author: Patrik Renka
• Mentor: Darko Možnik (mentor)
• Committee member: Ivica Smojver (predsjednik povjerenstva)
• Committee member: Darko Možnik (član povjerenstva)
• Granter: University of Zagreb; (Croatian Defence Academy "Dr. Franjo Tuđman"); Zagreb
• Defense date and country: 2022-09-29, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Interdisciplinary Technical Sciences

Abstract

Upravljanje rizikom dio je čovjekove svakodnevice od samog nastanka, od najmanjih odluka
koje donosimo u danu, do formiranih timova usavršenih za analizu rizika, svaki dan donosimo
odluke temeljem procjene rizika koje ta odluka donosi sa sobom. Svrha ovog rada je analizirati i
usporediti neke od najzastupljenijih normi za upravljanje rizikom, definirati pojam rizik, te
opisati metode kojima se upravlja rizikom. Opisati će se aspekti informacijske sigurnosti, vrste
informacijske sigurnosti, neki od najučestalijih rizika u informacijskoj sigurnosti, te tehnologije
koje se koriste u smanjenju definiranih rizika, također će se obraditi ISO i NIST familije
standarda za upravljanje rizikom, gdje će se spomenuti njihove prednosti i mane te načini na koji
se koriste u poduzećima.

Abstract (english)

Risk management has been a part of person’s everyday life since the very beginning, from the
smallest decisions we make throughout the day, to the formed teams perfected for risk analysis,
every da we make decisions baes on risk assessment that decision brings with it. Purpose of this
paper is to analyse and compare some of the most common standards for risk management,
define the term risk, and describe the methods used to manage risk. Aspects of information
security, types of information security, some of the most common risks in information security,
and technologies used to reduce defined risks will also be described, ISO and NIST families of
risk management standards will be explained, where their advantages and disadvantages will be
mentioned, and the ways in which they are used in enterprises.

• Keywords: informacijska sigurnost; upravljanje rizicima; rizik; ISO 31000; NIST SP 800-30; NIST SP 800-37 r2; NIST SP 800-39; NIST SP 800-53
• Keywords (english): information security; risk management; risk; ISO 31000; NIST SP 800-30; NIST SP 800-37 r2; NIST SP 800-39; NIST SP 800-53
• Language: croatian
• URN:NBN: urn:nbn:hr:249:058764
• Study programme: Title: Military Engineering; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica inženjer/inženjerka vojnog inženjerstva (sveučilišni/a prvostupnik/ prvostupnica inženjer/inženjerka vojnog inženjerstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-24 11:43:10