The project in five facts.
Challenge, approach and results.
In recent years, companies have been forced to undergo at least a certain degree of digitalisation due to the COVID-19 pandemic. In doing so, companies have, in addition to incurring additional costs and being unprepared for working from home, inadvertently exposed security vulnerabilities, as they probably did not previously allow working from home, meaning that employees were not equipped with portable computers and did not have established policies for working from home or an adapted working environment at home. Security policies are often used in conjunction with other types of documentation, such as standard operating procedures. As part of the diploma thesis, they will determine what constitutes an effective security policy. They will also examine how to write a security policy and how often it needs to be updated.
Problem
In recent years, companies have been forced to undergo at least a certain degree of digitalisation due to the COVID-19 pandemic. In doing so, companies have, in addition to incurring additional costs and being unprepared for working from home, inadvertently exposed security vulnerabilities, as they probably did not previously allow working from home, meaning that employees were not equipped with portable computers and did not have established policies for working from home or an adapted working environment at home. Suddenly, however, companies had to enable remote access for their employees, which can open additional doors for malicious actors that are not sufficiently well protected.
At the same time, a system is only as secure as the least educated employee regarding threats and data protection. An information technology security policy is a document that sets out the rules, expectations and general approach that an organisation uses to maintain the confidentiality, integrity and availability of its data. Security policies exist at many different levels, from high-level constructs describing the company's overall security objectives and principles to documents addressing specific issues such as remote access or the use of Wi-Fi.
Solution and Method
Security policies are often used in conjunction with other types of documentation, such as standard operating procedures. Together, these documents help a company achieve its security objectives.
Results
As part of the diploma thesis, they will determine what constitutes an effective security policy. They will also examine how to write a security policy and how often it needs to be updated. There are also standards, such as ISO 27001, which contains guidelines on how a company should approach the protection of company data.
They will also take into account the TISAX standard, which is a mechanism for assessing and exchanging information security in the automotive industry. The most important element, however, is of course the employees, so they will also examine how to present the security policy to employees and how to implement it, as a security policy is not just a document gathering dust, but a living document that must be regularly updated. We must not forget how digitalisation, working from home and the pandemic affect the environment.
Due to working from home, the digitalisation of companies has increased, along with greater awareness that not every document needs to be printed, which for most companies is one of the few ways in which a company impacts the environment through its digitalisation.
Module, programme and stories.
Your diploma project for a real company.
A diploma thesis at Academia solves a challenge from a company – often the one where you do your 800 hours of placement. Read about the Sistemsko inženirstvo module or book a consultation.