Posouzení úrovně bezpečnostní zralosti v oblasti mobilního a internetového bankovnictví

This thesis focuses on assessing and subsequently improving the security maturity level of internet and mobile banking applications within a selected financial institution. The theoretical part analyzes the specifics of cybersecurity in the financial sector, the regulatory requirements of the DORA regulation, and provides a detailed introduction to the OWASP SAMM framework as a tool for managing software security. The practical part is dedicated to performing a baseline maturity assessment, which identified critical gaps, particularly in the automation of security controls within the CI/CD pipeline. Based on these findings, an integration framework was designed and implemented using SonarQube for static application security testing (SAST) and OWASP Dependency-Check for software composition analysis (SCA). The contribution of the work is verified by a repeated maturity assessment, confirming a demonstrable shift in five streams of the SAMM model. The thesis also defines next steps for future development toward proactive software supply chain protection.