Systém řízení bezpečnosti informací v malém podniku

This thesis discusses information security management and information security management systems in small businesses. The goal and prospective added value of this thesis is to provide with a set of practical comments and recommendations for those who implement and/or administer an information security management system in the delicate environment of a small enterprise. First part of the thesis contains theoretical definition of information security and information security management systems. Also, this part describes standards relevant to this thesis. Second part defines the concept of "small business" and discusses possible options of designing ISMS in such business so that it complies with standards mentioned above and is an effective as well as affordable solution which does not demand excessive amount of company's resources. Third and final part of this thesis is analysis of ISMS of a specific company that fits the definition of small business -- BDO IT a.s.