ŘÍZENÍ BEZPEČNOSTI INFORMACÍ DLE NOREM ŘADY ISO 27000 V RÁMCI MODELU ŘÍZENÍ PODNIKOVÉ INFORMATIKY MBI

Security, particularly information security, has been mentioned for years as a priority in terms of business governance, which is trying to protect its assets, optimize costs, etc. To implement related activities, businesses can use the help of for instance ISO standards, which are very complex and abstract. In the theoretical section, this work presents the (ČSN ISO/IEC, 2014) standard describing the information security management system and the (MBI, nedatováno) model as a business model suitable for managing business informatics, with its IT security-related artefacts. In the practical section, based on research, it presents the content of the model related to ISMS in the form of its adopted, revised and newly created artefacts. The main goal of this thesis is to develop and revise the model’s artefacts based on the applied (ČSN ISO/IEC, 2014) to cover the area and be included in the model on the basis of an assessment by independent reviewers. These final outcomes can then be a readily available benefit to the perspective or management of business information security.