Zhodnocení stavu systému managementu bezpečnosti informací

Abstract

The goal of this thesis is to evaluate an information security management systém of the company Finder a.s company and highlight existing problems and vulnerabilities in the information system. The first part of the thesis is focused on terms like information security,information security threats and then analyzes in detail the characteristics of the norm ISO / IEC 27001:2005 and finally describes the audit process. In the second part is the company introduced and the methodology of the information security management analysis specified. In the third part is the information security management analysis of the company done. Each specific provision is evaluated according to the standard rateof fulfillment.