Audit bezpečnosti informací podle normy ISO/IEC 27001:2005

Abstract

The subject of thesis is Protection of information’s audit according to standard specification ISO/IEC 27001:2005 in manufacturing firm. Thesis goal is to assess Information Security Management System to remark on system areas with insufficient protection. First part occupies by identification of information protection conception and standard specification ISO/IEC 27001 characteristic. Second part focuses on audit preparing according to standard specification, contains plan of audit and specify used way of evaluation. Third part follows with audit realization and evaluation of security management system based on acquired results in firm.