INFORMATION SECURITY IN A MEDIUM SIZED COMPANY

Informacijska podpora v podjetjih je postala nujna za uspešno poslovanje podjetja. Pri vpeljavi in uporabi informacijskega sistema igra pomembno vlogo tudi varnost. V veliko pomoč pri obvladovanju varnosti nam je varnostna politika informacijskega sistema. Za pripravo varnostne politike si lahko pomagamo s standardi in primeri dobrih praks. Z diplomskim delom smo pokazali, da je mogoče varnostno politiko napisati na preprost in strnjen način. Zato smo izdelali primer varnostne politike, za katero menimo, da jo je mogoče uporabiti v velikem krogu malih in srednje velikih podjetjih in s tem pripomoči k večjemu zavedanju o informacijski varnosti.Information support has become indispensable for successful operation of companies. When an information system is introduced and used, security also plays an important role. An information systems security policy is of great help when managing security. When designing a security policy, standards and good practices are a very good resource. This thesis has shown that a security policy can be written in a simple and concise manner. A security policy model was created as part of the thesis that can be applied in a wide variety of small and medium companies and can consequently contribute to better awareness about information security