Značaj kibernetičkog kriznog menadžmenta za sigurnost poslovanja na primjeru telekomunikacijskog poduzeća

master's thesis

• Title (english): Significance of cyber crisis management for business security by an example of a telecommunication enterprise
• Author: Katarina Jelić
• Mentor: Davor Labaš (mentor)
• Committee member: Božidar Jaković (predsjednik povjerenstva)
• Committee member: Martina Sopta Ćorić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Economics and Business; (Department of Managerial Economics); Zagreb
• Defense date and country: 2023-07-10, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Economics; Economics of Entrepreneurship

Abstract

Napretkom tehnologije raste i broj prijetnji s kojima se poduzeća susreću, a posebnu pozornost hakera zaokupljaju telekomunikacijska poduzeća koja u svakodnevnom poslovanju koriste osobne podatke korisnika. Upravo ranjivost koju telekomunikacijska poduzeća imaju te manjak znanja o sigurnosti poslovanja u telekomunikacijskoj industriji navode na pisanje ovog rada. Na početku rada upoznajemo se s teorijskim znanjima o kriznom menadžmentu te s njegovom ulogom u zaštiti kibernetičke sigurnosti, ali i pojmovima kibernetičkog rizika i kibernetičke sigurnosti. Zahvaljujući postojećim primjerima iz prakse, komparativnom analizom slučajeva dobrih praksi prikazano je kako bi trebalo djelovati u slučaju pojave kibernetičke krize u poduzeću. Osim samog kriznog menadžmenta, pozornost se usmjerava i na sigurnost poslovanja u telekomunikacijama gdje zaključujemo da je nužna zaštita mrežne sigurnosti kroz uspostavu vatrozida, VPN-a te ostalih alata za zaštitu. Kako bi sigurnost poslovanja bila moguća, nužna je i sigurnost podataka u telekomunikacijama te su, s ciljem isticanja dobrih praksi, pojašnjeni i međunarodni standardi poput ISO/IEC, ITU i sličnih koji izdvajaju jaka telekomunikacijska poduzeća od slabih. Prikazani su i propusti u telekomunikacijskim poduzećima kako bi se istaknula važnost brige o sigurnosti podataka i zaštiti mreže. Sva teorijska znanja prikupljena iz sekundarnih izvora poput domaće i strane literature te internetskih stranica vodila su ka primarnom istraživanju gdje je dobiven uvid u konkretno poslovanje telekomunikacijskoj poduzeća. Provedenim intervjuom i kasnijom analizom, zaključeno je da je danas nemoguće poslovati bez adekvatne primjene kibernetičkog kriznog menadžmenta te da je nužno u svakom trenutku brinuti o kibernetičkoj sigurnosti i raditi na unapređivanju znanja na svim sferama koje kibernetička kriza može zahvatiti.

Abstract (english)

With the advancement of technology, companies are facing an escalating number of threats. Telecommunication companies draw significant attention from hackers due to their frequent utilization of users' personal data. The vulnerability inherent in telecommunication companies, coupled with the limited understanding of business security within the telecommunications industry, serves as the motivation for this paper. To commence, the paper acquaints the reader with theoretical knowledge about crisis management and its role in the protection of cyber security, alongside with the concepts of cyber risk and cyber security. Through the examination of practical examples, a comparative analysis of best practice cases demonstrates the appropriate actions a company should take during a cyber crisis. In addition to crisis management itself, attention is also given to business security in telecommunications. It is concluded that network security protection is necessary through the establishment of firewalls, VPNs, and other protective tools. Moreover, data security in telecommunications is deemed necessary to ensure business security. To highlight best practices, international standards such as ISO/IEC, ITU, and similar ones are explained. The possession of international certificates distinguishes strong telecommunications companies from weak ones. Weaknesses in telecommunications companies are also presented to emphasize the significance of data security and network protection. Theoretical knowledge gathered from secondary sources, including domestic and foreign literature and websites, have guided primary research, which provided insights into the specific operations of telecommunications companies. Through conducted interviews and subsequent analysis, it has been concluded that operating without adequate implementation of cyber crisis management is impossible in the present landscape. Constant prioritization of cyber security and continuous efforts to enhance knowledge in all areas susceptible to a cyber crisis are imperative.

• Keywords: kibernetički krizni menadžment; kibernetički rizik; sigurnost poslovanja; mrežna sigurnost; telekomunikacije
• Keywords (english): cyber crisis management; cyber risk; business security; network security; telecommunications
• Language: croatian
• URN:NBN: urn:nbn:hr:148:155240
• Study programme: Title: Business Economics; Study programme type: university; Study level: integrated undergraduate and graduate; Academic / professional title: magistar/magistra ekonomije (magistar/magistra ekonomije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Access restricted to students and staff of home institution
• Created on: 2023-07-10 17:53:40