Audit of ISO/IEC 27001 standard compliance in small productioncompany

V diplomskem delu je bila izvedena presoja skladnosti s standardom ISO/IEC 27001:2013 v manjšem proizvodnem podjetju BVG, d. o. o. Zaradi same narave in velikosti podjetja upravljanje informacijske varnosti do sedaj ni bilo na prvem mestu, vendar se vodstvo podjetja vse bolj zaveda strateškega pomena tega področja. V prvem delu diplomskega dela so podane teoretične osnove s področja informacijske varnosti. Sledijo predstavitev okolja, torej samega podjetja BVG, d.o.o., popis njihovih poslovnih procesov in trenutne informacijske podpore. V empiričnem delu so podani rezultati analize skladnosti s standardom ISO/IEC 27001:2013, ki so bili pridobljeni s pomočjo metodološkega orodja, izdelanega v okolju Excel, dosegljivega na spletu. Na koncu diplomskega dela so ponujene rešitve, ki bi lahko pripomogle k izboljšanju stanja na področju informacijske varnosti.The thesis we carried out is an audit of the standard ISO / IEC 27001: 2013 compliance in a small manufacturing company BVG d.o.o. Due to the nature and size of the company, information security management has not been a priority for the company but the company management is becoming more and more aware of the strategic importance of this area. In the theoretical part of the thesis, we have given the theoretical basics in the field of information security. The following is a presentation of the environment, that is, BVG d.o.o. and an inventory of the company’s business processes and existing information technology. The empirical part of the thesis presents the results of compliance analysis with the ISO / IEC 27001:2013 standard. The analysis was carried out with the help of a methodological tool developed in Excel accessible on the Internet. The results were analysed and based on the findings the management of the company was provided with solutions that could help improve the information security level