Řízení informačních rizik ve společnosti ČEZ ICT Services, a.s.

Abstract

Diploma thesis is focused on the cost in the area of information security in the company ČEZ ICT Serveces a.s. The main task is to provide a proposal for the method of measurement of the cost-effectiveness of the information security in corporations. The theoretical part of the thesis is devoted to definitions and clarification of the most important concepts in information systems and information security. These include for example methodology of risk assessment, security metrics etc. The last chapter of the theoretical part is reserved to cost analysis on information security. This chapter is also devoted to the method of the total cost of ownership (TCO), because the practical part is focused on the comparsion of the methods of the TCO and the TBO (total benefits of ownership). The practical part ot the thesis contains a calculation of TCO and TBO which related with information security of the company. The next part include comparsion of the total cost of ownership with total benefits of ownership. The next part is focused on the selection of the ITIL methodology for security system with subsequent recommendation. The last point of this thesis is focused on the risk associated with the safety with a subsequent description of the measures. At the conclusion of the thesis are summarized facts established in the context of the carried out calculations and analyses for the above company.