20.500.12556/RUL-180164 Analiza obvladovanja tveganj na področju kibernetske varnosti v malih in srednje velikih podjetjih – primer Slovenije magistrsko delo Analysis of cybersecurity risk management in small and medium-sized enterprises – the case of Slovenia Kibernetska varnost je zaradi pospešene digitalizacije poslovnih procesov in naraščajočega števila kibernetskih groženj postala eno osrednjih vprašanj sodobnega poslovnega okolja. Mala in srednje velika podjetja (MSP) so posebej izpostavljena, saj pogosto razpolagajo z omejenimi finančnimi, kadrovskimi in organizacijskimi viri za sistematično obvladovanje kibernetskih tveganj. Ker MSP predstavljajo pomemben del slovenskega gospodarstva, je analiza njihove kibernetske varnosti z vidika upravljanja tveganj strokovno in družbeno relevantna. Raziskava je zasnovana na dveh ravneh. Na makroravni je bila proučena povezava med digitalnimi kompetencami prebivalstva in ravnjo kibernetske varnosti držav Evropske unije z uporabo korelacijske in linearne regresijske analize sekundarnih podatkov. Na mikroravni je bila izvedena kvantitativna raziskava med slovenskimi MSP z anketnim vprašalnikom. Zbrani podatki so bili analizirani z deskriptivno statistiko in primerjalnimi statističnimi testi. Rezultati kažejo, da digitalne kompetence same po sebi ne zagotavljajo visoke ravni kibernetske varnosti držav. Na ravni MSP so osnovni tehnični varnostni ukrepi razmeroma razširjeni, medtem ko so formalizirani procesi upravljanja tveganj manj razviti. MSP, ki uvajajo standardizirane okvire kibernetske varnosti, dosegajo višjo in stabilnejšo raven obvladovanja tveganj, kar potrjuje pomen strukturiranega in sistematičnega pristopa k varnostnemu upravljanju. Delo prispeva k razumevanju dejavnikov, ki vplivajo na kibernetsko varnost MSP, ter poudarja pomen standardizacije kot podpornega mehanizma za sistematično upravljanje tveganj. Ugotovitve predstavljajo strokovno podlago za oblikovanje priporočil za MSP, odločevalce in podporne institucije pri krepitvi kibernetske odpornosti. Omejitve raziskave izhajajo iz velikosti vzorca in uporabe podatkov, pridobljenih na podlagi lastnih ocen anketirancev, zato so nadaljnje poglobljene in longitudinalne raziskave smiselne za dodatno potrditev rezultatov. Cybersecurity has become one of the central issues of the modern business environment due to the accelerated digitalization of business processes and the growing number of cyber threats. Small and medium-sized enterprises (SMEs) are particularly exposed, as they often face limitations in financial, human, and organizational resources for the systematic management of cyber risks. Since SMEs represent a significant part of the Slovenian economy, analyzing their cybersecurity from a risk management perspective is both professionally and socially relevant. The research is structured on two levels. At the macro level, the relationship between the digital competences of the population and the level of cybersecurity of European Union member states was examined using correlation and linear regression analysis of secondary data. At the micro level, a quantitative study was conducted among Slovenian SMEs using a survey questionnaire. The collected data were analyzed using descriptive statistics and comparative statistical tests. The results indicate that digital competences alone do not ensure a high level of national cybersecurity. At the SME level, basic technical security measures are relatively widespread, while formalized risk management processes remain less developed. SMEs that implement standardized cybersecurity frameworks achieve a higher and more stable level of risk management, confirming the importance of a structured and systematic approach to security governance. The thesis contributes to a better understanding of the factors influencing SME cybersecurity and highlights the role of standardization as a supporting mechanism for systematic risk management. The findings provide a professional basis for developing recommendations for SMEs, policymakers, and supporting institutions in strengthening cyber resilience. The limitations of the study stem from the sample size and the use of self-reported data; therefore, further in-depth and longitudinal research is recommended to validate the results. kibernetska varnost MSP obvladovanje tveganj standardizacija digitalne kompetence informacijska varnost cybersecurity SMEs risk management standardisation digital skills information security true false false [V. Mrđa Podčedenšek] Slovenski jezik Angleški jezik Magistrsko delo/naloga 2026-03-04 11:45:02 2026-03-04 11:45:17 2026-03-06 13:41:56 0000-00-00 00:00:00 2026 0 Ljubljana 0 Ljubljana XI, 104 str. 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.056.53:330.526.33 (497.4)(043.2) 18463 270786819 Mrda_podcedensek_Veronika_-_ANALIZA_OBVLADOVANJA_TVEGANJ_NA_PODROCJU_KIBERNETSKE_VARNOSTI_V_MALI.pdf Mrda_podcedensek_Veronika_-_ANALIZA_OBVLADOVANJA_TVEGANJ_NA_PODROCJU_KIBERNETSKE_VARNOSTI_V_MALI.pdf 1 78A7ED20E3B364BCCD9D9DD410C0E0FC d7a5c28601d9e94beef077284ef8b0c2d6a652edaff720c4044ee9606e53bfdf e02b164e-17b6-11f1-a1ba-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=229315 Fakulteta za upravo 0 0 0