IT Infrastructure Security of a High School

This bachelor thesis deals with the IT infrastructure security in a selected high school. The main objective of the thesis is to perform a comprehensive security audit of the current infrastructure and propose specific, practically feasible measures to increase the overall level of the organization's cybersecurity. The theoretical part defines the basic concepts of information security, defense models, and the most common vectors of cyber attacks, including internal threats. The practical part subsequently applies this knowledge using the NIST SP 800-115 methodology, combining documentation analysis, passive and active network reconnaissance, and vulnerability scanning at the endpoint and server levels. The audit revealed critical shortcomings in the form of an absence of logical network segmentation, the presence of shadow IT, and severe vulnerabilities on key servers, including backup issues concerning the school information system. In the conclusion, prioritized technological and procedural remedial measures are formulated, such as logical VLAN segmentation, immediate mitigation of the identified vulnerabilities, and the introduction of continuous security management processes.