Podpora poslovnemu odločanju pri obvladovanju tveganj organizacije

OZIMEK, MIHA (author), Trček, Denis (mentor)

Orodje za ocenjevanje tveganj je namenjeno pokrivanju ocenjevanja tveganj vseh področij v organizaciji, kjer bi deležniki (varnostni inženirji oziroma skrbniki sistemov vodenja, vodstvo, lastniki procesov oziroma vodje oddelkov, zaposleni in pogodbeni sodelavci, nadzorniki ter revizorji) na enostaven način prišli do izračuna tveganj, ki so možna v organizaciji in z njimi povezanimi ustreznimi ukrepi, ki jih organizacija izvaja z namenom zmanjševanja tveganj. Kako to zagotoviti na pregleden in hkrati enostaven način? S programsko opremo, ki olajša delo ocenjevalcem, je možno oceniti vsa področja v organizaciji na tak način. Ker obstaja malo programske opreme, ki bi ocenjevalcem to omogočala v skladu z zakonodajo in hkrati dovolj preprosto, da ne bi bistveno obremenjevali poslovnih procesov, bi modularno pripravljena programska oprema pripomogla k bistveno boljšemu ocenjevanju tveganj, izvajanju ukrepov za izboljšave in s tem k boljšemu poslovanju organizacij. Cilj naloge je, da na podlagi zakonodaje in standardov prikaže metodološki pristop, ki se lahko realizira z ustrezno tržno naravnano programsko opremo. Le-ta pa lahko izboljša vodenje organizacije na področju obvladovanja tveganj.

• Language: Slovenian
• Keywords: ocena tveganja, ukrepi za zmanjševanje tveganj, orodje za ocenjevanje tveganj, programska oprema, standardi, zakonodaja
• Work type: Master's thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2016
• PID: 20.500.12556/RUL-85657
• Publication date in RUL: 20.09.2016

Secondary language

• Language: English
• Title: Support of business decision-making in risk management process

Abstract

Tool for risk assessment is intended to cover the risk assessment of all areas of the organization where stakeholders - security engineers and management system administrators, management of the organization, process owners and heads of departments, employees and contract agents, supervisors, auditors, and others need an easy way to assess the risks that are possible in the organization and associated appropriate measures which are carried out by the organization in order to reduce these risks. How to ensure a transparent and at the same time an easy way to assess the risk? With the software, which facilitates the work of the assessors, it is possible to assess all areas in the organization in a transparent and simple manner. Since there are very few examples of software that would allow assessors to carry out risk assessment in accordance with standards and legislation and that would be at the same time sufficiently simple not to cause substantial burden for key business processes owners, the modular architecture of software could help to improve risk assessment, implementation of measures for improvement and throughout this improve the business of the organization. Aim of the thesis is that on the basis of laws and standards methodological approach is prepared which is realized in the appropriate software tool that will improve the management of the organization in the segment of risk assessment.

• Keywords: risk assessment, risk minimization measures, a tool for risk assessment, software, standards, legislation