Audit bezpečnosti informací v nadnárodní společnosti

Abstract

This thesis presents an explanation of basic concepts of auditing, insight into the history of information security audit and review of existing ISO standards dealing with information security. Then presents the PDCA model, which deals with the establishment and management of effective safety management system in the organization. The second part gives an insight into the audit information security practices, which was developed in a particular company in accordance with ISO / IEC 27001:2005. Thesis is documenting and commenting on all the standard recommended precautions. In the final section then provides an evaluation of the results and proposed steps to obtain a certificate by the standard.