INFORMATION SECURITY IN BOSNIA AND HERZEGOVINA

Branka Mijić

Abstract


At present, information security is most commonly associated with various Internet threats such as hacking attacks, viruses, or various other applications that have the potential to harm our computer, information system, and even information. However, information security should be seen in a wider context. Possible uncontrolled "leak" of important and valuable information outside the system poses a major threat to the organization, the company. We can say that information that can often be very important or characterized as secret and confidential, not always in electronic form, can be in written documents, pictures, tables, charts, etc. Nowadays, most of the information mentioned is in digital form, the subject of this paper relates to the security of information, risks, risk assessment and risk management and legal regulations, all for the purpose of protection, respectively, information security and information system, and for all this it is necessary to apply ISO27001 standards.


Keywords


information security, risk assessment, risk management, legal regulations and ISO 27001.

Full Text:

PDF (Serbian)

References


Antoliš, K., Ždrnja, B., Pakšić, I., Vugrek, A., Pavliček, J., Marijenović, I., . . . Jušić, S. (2010). Sigurnost informacijskih sustava. Zagreb: Algebra d.o.o.

CERT RS. (2019). CERT RS Odjeljenje za informacionu bezbjednost. Preuzeto sa https://oib.aidrs.org/

Cingula, M. (2016). KORPORATIVNA SIGURNOST - Pojam sigurnosti i temeljni srodni pojmovi. U B. Vukelić, Sigurnost informacijskih sustava (str. 6). Rijeka: Veleučilište u Rijeci.

Hajdina, N. (2013). Osnove informacijske sigurnosti. Zagreb: FER - Zavod za primijenjeno računarstvo.

Hamidović, H. (2010). Upravljanje rizikom informacijske sigurnosti. Telekomunikacije, 33-37.

ISO. (2018). ISO 27005:2018 Information technology -- Security techniques -- Information security risk management. Preuzeto sa ISO: https://www.iso.org/standard/75281.html

ISO/IEC. (2005, 10 27). HRN ISO/IEC 27001:2005. Preuzeto sa Hrvatski zavod za norme: https://www.iso.org/news/2005/10/Ref976.html

ISO/IEC. (2018). ISO/IEC 27000 family - Information security management systems. Preuzeto sa ISO: https://www.iso.org/isoiec-27001-information-security.html

ISO/IEC 27002. (2013, 10). Information technology -- Security techniques -- Code of practice for information security controls. Preuzeto sa ISO: https://www.iso.org/standard/54533.html?browse=tc

ISO/IEC 27003. (2017, 03). Information security management systems — Guidance. Preuzeto sa ISO: http://www.iso27001security.com/html/27003.html

ISO/IEC 27004. (2016, 12). Information security management ― Monitoring, measurement, analysis and evaluation. Preuzeto sa ISO: https://www.iso.org/standard/64120.html?browse=tc

ISO/IEC 27005:2018. (2018, 07). Information technology -- Security techniques -- Information security risk management. Preuzeto sa ISO: https://www.iso.org/standard/75281.html?browse=tc

ISO/IEC 27006. (2015, 10). Requirements for bodies providing audit and certification of information security management systems. Preuzeto sa ISO: https://www.iso.org/standard/62313.html?browse=tc

Klaić, A. (2010, 02 08). Pregled stanja i trendova u suvremenoj politici informacijske sigurnosti i metodologijama upravljanja informacijskom sigurnošću. Preuzeto sa FER - Fakultet elektrotehnike i računarstva: https://www.fer.hr/_download/repository

Klasić, K., & Klarić, K. (2009). Informacijski sustavi. Zagreb: Intus informatika.

Krapac, D. (1992). Kompjuterski kriminalitet. Zagreb: Pravni fakultet.

Pleskonjić, D., Maček, N., Đorđević, B., & Carić, M. (2007). Sigurnost računarskih sistema i mreža. Beograd: Mikro knjiga.

Sinkovski, S., & Lučić, B. (2006). Informaciona bezbednost i kriptografija. ZITEH 2006 (str. R25 1-16). Beograd: IT Veštak. Preuzeto sa http://www.itvestak.org.rs/media/biblioteka/zbornik-radova-ZITEH-06.zip

Uremović, D. (2009). Kako upravljati IT rizicima. InfoTrend(5), 42-47.

Zakon o zaštiti tajnih podataka (Službeni glasnik BiH br. 54/05. i prečišćeni 12/09.;

Zakon o zaštiti osobnih/ličnih podataka (Službeni glasnik BiH br.32/01, 49/06, 76/11. i prečišćeni 89/11.;

Zakon o centralnoj evidenciji i razmjeni podataka (Službeni glasnik br.32/01, 16/02, 32/07. i 44/07 (prečišćeni));

Zakon o komunikacijama (Službeni glasnik BiH br. 31/03, 75/06, 32/10 i 98/12. ;

Službeni glasnik BiH, broj 38/17 Odluka - Politika upravljanja informacijskom sigurnošću u institucijama Bosne i Hercegovine, za razdoblje 2017 - 2022. godine


Refbacks

  • There are currently no refbacks.