|
|
IT risk management in trading company
Pail, Vojtěch ; Veber, Jaromír (advisor) ; Luc, Ladislav (referee)
This thesis focuses on IT risk management process. IT risks of trading company are identified by using risk assessment techniques. The risk assessment is conducted according to international standard ISO/IEC 27005 and ISACAs Risk IT Framework. Finally, risks are evaluated and controls are proposed.
|
|
|
Registr IT rizik
Kohout, Karel ; Doucek, Petr (advisor) ; Luc, Ladislav (referee)
The theoretical part of the thesis analyzes several selected methodologies and best-practices related to information technology risks management, with focus on documents and guidance developed by ISACA. It builds a set of ideas and basic requirements for effective model of an IT risk register. Strong emphasis is placed on mapping CobiT 4.1 based Risk IT to COBIT 5. The practical part describes implementation of an exploratory web-based IT risk register in Python programming language utilizing the Django framework and employs concepts from the analysis.
|
|
|
IS / ICT processes and their mapping to the standards and frameworks in the area of IS / ICT
Dvořák, Jan ; Chlapek, Dušan (advisor) ; Bruckner, Tomáš (referee)
The aim of this thesis is to define the audit issues regarding IS/ICT sector, creating a summary of standards, frameworks and best practices in IS/ICT - usable for IS auditing and mutual mapping of selected standards to the chosen reference framwork of ICT and following related goal is to make a procedure for the mapping of IT processes on standards in the field of IS/ICT. The aim of this thesis is description and mapping of the most important methodologies, standards and best practices related to the management and audit of IS/ICT and following related goal is building a procedure that allows the company to assess readiness for the certification of any of the selected standards, implement an alternative methodology for IT management or audit IS/ICT. First, the notion of audit is defined and discussed, followed by the discussion of the issue of IT audit, together with the financial audit. This is followed by a description of the different methodologies and approaches, which I used in my work. The chapter continues the description of methodology section that describes the mapping results. The actual mapping is in a separate Excel file and is part of this thesis. In the next chapter there is a procedure for mapping of business processes to different methodologies and standards used for management and audit of IS / ICT, which was created by myself.
|
guest ::
