20.500.12556/RUL-184955 Upravljanje informacijskih tveganj v Sloveniji in EU Information risk management in Slovenia and the EU Informacijska tveganja predstavljajo eno najpomembnejših tveganj sodobnih organizacij, saj digitalizacija poslovnih procesov povečuje izpostavljenost kibernetskim incidentom in njihovim finančnim ter nefinančnim posledicam. Namen magistrske naloge je analizirati upravljanje informacijskih tveganj v Sloveniji in EU s poudarkom na regulatornem okviru, kibernetski varnosti in vlogi kibernetskega zavarovanja kot instrumenta obvladovanja tveganj. Naloga združuje teoretični pregled upravljanja informacijskih tveganj, analizo evropske in nacionalne regulative ter empirično kvantitativno modeliranje kibernetskih incidentov. Poseben poudarek je namenjen modeliranju frekvence incidentov, porazdelitev izgub in agregatne izgube, pri čemer so uporabljeni modeli iz teorije tveganj in teorije ekstremnih vrednosti. Na podlagi teh modelov je ocenjena tudi primernost njihove uporabe pri izračunu premij kibernetskih zavarovanj. Rezultati naloge kažejo, da učinkovito upravljanje informacijskih tveganj zahteva celovit pristop, ki vključuje tehnične, organizacijske in človeške dejavnike, ter da zakonodaja predstavlja pomemben, vendar ne zadosten okvir za obvladovanje tveganj. Kvantitativna analiza potrjuje prisotnost težkih repov pri porazdelitvah izgub, kar ima pomembne implikacije za zavarovalniško prakso. Naloga prispeva k boljšemu razumevanju informacijskih tveganj in predstavlja osnovo za nadaljnje raziskave ter razvoj učinkovitih pristopov k upravljanju in zavarovanju informacijskih tveganj. Information risks represent one of the key challenges faced by modern organizations, as increasing digitalization of business processes leads to greater exposure to cyber incidents and their financial and non-financial consequences. The aim of this master’s thesis is to analyze information risk management in Slovenia and EU, with a focus on the regulatory framework, cybersecurity, and the role of cyber insurance as a risk management instrument. The thesis combines a theoretical overview of information risk management, an analysis of the European and national regulatory environment, and an empirical quantitative analysis of cyber incidents. Special attention is given to modeling the frequency of incidents, loss severity distributions, and aggregate losses, using methods from risk theory and extreme value theory. Based on these models, the applicability of quantitative approaches for cyber insurance premium calculation is also assessed. The results indicate that effective information risk management requires a holistic approach encompassing technical, organizational, and human factors, while regulation provides an important but not sufficient framework for risk mitigation. The empirical analysis confirms the presence of heavy-tailed loss distributions, which has significant implications for cyber insurance pricing and risk assessment. The thesis contributes to a better understanding of information risks and provides a foundation for further research and the development of more effective approaches to information risk management and cyber insurance. upravljanje informacijskih tveganj kibernetska varnost kibernetski incidenti kibernetsko zavarovanje teorija tveganj modeliranje frekvence in resnosti izgub agregatna izguba teorija ekstremnih vrednosti težkorepe porazdelitve information risk management cybersecurity cyber incidents cyber insurance risk theory frequency and severity modeling aggregate loss modeling extreme value theory heavy-tailed distributions true false false Slovenski jezik Angleški jezik Magistrsko delo/naloga 2026-07-18 08:15:07 2026-07-18 08:15:14 2026-07-29 13:30:36 0000-00-00 00:00:00 2026 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 519.8:519.2 160691 283856899 22074.pdf 22074.pdf 1 6636AFFDE75247EF7383F8C0F3BF2B23 7478a77e3c62818e5731e32a78141e3b109a0fbb243adeb2b4b713671847473b d3c93f2c-826f-11f1-9b0d-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=240416 Fakulteta za matematiko in fiziko 0 0 0