Návrh reportingu pro podporu tvorby zprávy o situaci v oblasti kybernetické bezpečnosti na VŠE

Abstract This thesis focuses on the design of reporting to support the creation of cyber security situation reports at the University of Economics, Prague (VŠE). The main goal is to enhance the efficiency of reporting and communication within the Security Operations Center (SOC), which is crucial for effective management and protection of cyber security at the university. This goal has been achieved through the design of a security report template for the SOC at VŠE. The thesis emphasizes the role of the SOC and includes a detailed analysis of the proposed template, along with examples of its practical application. A significant part of the work is also the development of a pilot reporting solution, which represents the first step in the implementation of reporting within a future threat intelligence platform. This solution serves as a key input for the compilation of the security report. Through a comprehensive set of Power BI dashboards, the work provides a multifaceted view of log data, insights into the performance, trends, and security postures of various information systems. The report is developed with an emphasis on carefully designed visualizations that illustrate the diversity of log sources, the volume and size of log files, as well as the frequency and distribution of log events. Key Performance Indicators (KPIs) are established, facilitating rapid assessment and informed decision-making in the field of cyber security. The thesis also identifies the challenges and limitations associated with the design of the template and offers recommendations for its improvement. Overall, the thesis provides valuable insights into the functioning of the SOC at VŠE and emphasizes its key role in the academic environment, highlighting the importance of proper reporting and data analysis for ensuring cyber security.