Audit a testování bezpečnosti informací v malých firmách

Abstract

This work deals with the security audit , mapping standards and methods of deployment and shows a concrete example of how the audit should look like and what it brings. As a model for my work served the company Fashion Arena Outlet Center ( FAOC ) Ltd. , specifically the Department of Fashion Management Center Arena, which is engaged in trading and it is the largest outlet center in the Czech Republic. To reduce the risk there were two of four security incidents with the most impact identified shortcomings, although they could have not been classified as a fatal. Thanks audit which also revealed improper practices that have led to a lack of awareness about such weighty matters as authorized access to the servers where access to technology room management center possess all employees. Apart from modifications of existing security measures there have been proposed several new alternations, one such measure could be automated as regular checks servers.