SECURITY OF INFORMATION SYSTEMS

Informacijski sustav je važan dio svakoga poslovnog sustava, te bilo koja poslovna organizacija ne može poslovati bez informacijskog sustava. Zato je vrlo važno osigurati informacijski sustav jer su često izloženi raznim neočekivanim napadima. Napadači mogu izvoditi aktivne ili pasivne napade, te se koristiti raznim metodama napada kao što su prekidanje i presretanje. Postoje i maliciozni programi koji mogu narušiti sigurnost informacijskih sustava. Razni maliciozni programi su virusi, crvi te trojanski konji. Trojanski konji se za razliku od virusa i crva ne mogu sami širiti. Za zaštitu od virusa razvili su se antivirusni programi, ali oni kao jedina zaštita informacijskom sustavu često i nisu dovoljna. Za sigurnost informacijskih sustava razvile su se zaštitne mjere, kao što su fizička metoda zaštite koja obuhvaća zaštitu građevina i okoliša, ali i same opreme te programska metoda zaštite koja obuhvaća kriptiranje. Postoje ISO norme i standardi koji se sastoje od najboljih praksi i preporuka za dizajn, implementaciju i održavanje sustava upravljanja informacijskom sigurnošću.Information system is an important part of any business system and business organizations can't do business without that system. It is therefore very important to provide the information system because it is often exposed to various unexpected attacks. Attackers can perform both active and passive attacks while using various attack methods such as interruptions and interceptions. The security of information systems can be undermined by malicious programs as well. Many types of malicious programs exist, such as viruses, worms and Trojan horses. Trojan horses, unlike viruses and worms, can not spread on their own. Antivirus programs have been developed to protect information systems, but often, as these programs are the only prossible protection, are not enough to protect the whole system. Protective measures have been developed for the security of information systems, such as a physical protection method that includes the protection of buildings and the environment, as well as the equipment itself and the protection methodology that includes encrypting. There are ISO standards that consist of best practices and recommendations for designing, implementation and maintaining information security management systems