Sistem za podporo odločanju pri nadzoru kibernetskega tveganja v bankah

KOŠAK, MATJAŽ (author), Rupnik, Rok (mentor), Bokal, Drago (comentor)

Kibernetsko tveganje se zaradi hitrega razvoja informacijske tehnologije, vse večje uporabe pametnih naprav, naprednega načina komunikacije, spreminjajočih se navad uporabnikov in iznajdljivosti kibernetskih kriminalcev povečuje. Dandanašnji kibernetski kriminalci so visoko motivirani profesionalci, ki so pogosto financirani s strani premožnih kriminalnih organizacij ali celo držav in imajo jasne cilje in strategijo. Ker ima napačno delovanje kritičnih sistemov lahko pomembne posledice za celotno družbo, se v zadnjih letih v svetu pospešeno sprejemajo strategije in načrti in odvijajo aktivnosti za spopadanje s kibernetskimi grožnjami. Zaradi vloge, ki jo ima bančni sektor morajo biti banke sposobne natančno identificirati vsa tveganja, s katerimi se soočajo in jih ustrezno meriti, upravljati in nadzorovati. Vedno morajo imeti dovolj kapitala za kritje nepričakovanih izgub. Kibernetsko tveganje je kot del tveganj informacijske tehnologije v bančni regulativi umeščeno v sklop operativnega tveganja. Zgodnje odkrivanje potencialnih groženj je bistvenega pomena za varnost poslovanja in učinkovito upravljanje s tveganji. V poplavi različnih metodologij, standardov, protivirusnih programov in pristopov, ki jih predpisujejo in predlagajo najrazličnejše javne in zasebne organizacije, se je pojavila potreba po sistematizaciji pristopov pri ocenjevanju kibernetskega tveganja. Sistem za podporo odločanju pri nadzoru kibernetskega tveganja v bankah, ki je predstavljen v magistrskem delu, je zasnovan na splošno sprejetih in trenutno veljavnih industrijskih standardih s področja informacijske varnosti in zagotavlja skupno osnovo za razumevanje, ocenjevanje in upravljanje kibernetskega tveganja. Predstavljen sistem za podporo odločanju pri nadzoru kibernetskega tveganja v bankah oceni tvegaje banke na podlagi ocene delovanja kontrolnih mehanizmov ter inherentnega tveganja. Nato identificira kritična področja ter v primeru povečanega tveganja predlaga ukrepe za zmanjšanje tveganja, kar omogoča lažje vsebinsko odločanje pri izbiri ukrepov pri nadzoru kibernetskega tveganja v bankah.

• Language: Slovenian
• Keywords: Sistem za podporo odločanju, nadzor kibernetskega tveganja v bankah, kibernetska kriminaliteta, tveganje IT, kibernetske grožnje.
• Work type: Master's thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2016
• PID: 20.500.12556/RUL-85958
• Publication date in RUL: 30.09.2016

KOŠAK, MATJAŽ, 2016, Sistem za podporo odločanju pri nadzoru kibernetskega tveganja v bankah [online]. Master’s thesis. [Accessed 23 March 2025]. Retrieved from: https://repozitorij.uni-lj.si/IzpisGradiva.php?lang=eng&id=85958

Secondary language

• Language: English
• Title: Decision support systems for cyber-risk supervision in banks

Abstract

Cyber risk has been increasing due to fast development of information technology, increased using of smart gadgets, advanced way of communication, changing habits of users, and inventiveness of cyber criminals. Nowadays, cyber criminals are highly motivated professionals who are frequently financed by wealthy criminal organizations, or even states, and have clear goals and strategies. False working of critical systems might have important consequences for the whole society, therefore the pace of the new strategies, plans, and different activities to fight cyber threats is being stepped up in the last years around the world. Because of the bank sector role, banks have to be able to precisely identify all risks they face and measure, manage, and control them. They must have enough capital to cover unexpected loss. Cyber risk as a part of information technology risk is placed in the system of operational risk. Early uncovering of potential threats is essential for security of business and efficient managing of risks. The abundance of new methodologies, standards, antivirus programmes and approaches that have been prescribed and proposed by different public and private organizations has brought with it a need for a systematic approach to assessing the cyber risk. The decision support system for cyber risk supervision in banks, which is presented in the master's thesis, is based on generally accepted and currently valid industrial standards pertaining to information security and provides for a general basis for understanding, assessment and management of cyber risks. The presented decisions support system for the supervision of cyber risk in banks evaluates the bank's risk based on the assessment of the inherent risk and the functioning of control mechanisms. It goes on to identify critical areas and suggests measures to mitigate the risk, which in turn enables more efficient decision-making as to the measures for the supervision of cyber risk in banks.

• Keywords: Decision support systems, cyber risk supervision in banks, cybercrime, IT risk, cyber threats