SECURITY ANALYSIS OF THE INFORMATION SYSTEM IN THE COMPANY STROKA PRODUKT D.O.O.

V diplomski nalogi sem izvedel analizo varnosti informacijskega sistema v podjetju Stroka Produkt d.o.o. PE Ljubljana, kjer sem tudi zaposlen. V nalogi sem podal teoretične osnove s področja varnosti, predstavil sem podjetje in opisal njegov informacijski sistem. Analiza je narejena s popisom dobrin, njihovim vrednotenjem ter popisom groženj in ranljivosti, ki je skladna s starim standardom BS 7799 ter sedanjim ISO 27001 standardom. Z izvedeno analizo tveganja sem poizkusil izpostaviti kritična področja v podjetju ter podal predloge za izboljšavo in zmanjševanje tveganj. Z uvedbo teh ukrepov bi v obravnavanemu podjetju bistveno izboljšali varnost njihovega informacijskega sistema ter pripomogli k učinkovitejšemu poslovanju.This diploma deals with the security analysis of the information system in the company Stroka Produkt d.o.o. branch office Ljubljana. In the first part of the diploma a theoretical bases of information security are presented. Besides, the company as well as its information system is described. The main part of the diploma includes the qualitative risk analysis which has been performed using the old BS 7799 standard and currently valid ISO 27001. On the basis of the risk analysis results, some additional countermeasures have been suggested. Implementation of these countermeasures could slightly improve the existent level of information security that could result in more efficient business of the company under consideration