Riziková analýza v kontextu řízení informačních systémů a auditu: synergie a význam

This bachelor´s thesis explores the issue of risk management in the context of information systems and its application within IT auditing. The aim of the thesis is to describe the general framework of risk management based on internationally recognized standards and methodologies, such as ISO 31000, ISO/IEC 27005, NIST800, and COBIT 5, and to apply these findings to a real-world case study. The research focuses on the synergy between risk management processes and IT auditing, based on the assumption that effective use of risk analysis can significantly improve the efficiency and focus of audit activities. In the practical part, a case study is carried out in a selected organization, focusing on the audit of the design and implementation of security measures. The outcome of the thesis is a proposed approach to integrating risk analysis into the planning and execution of IT audits. Furthermore, the thesis identifies the benefits, limitations, and key success factors of such integration.