Bezpečnostní politiky při tvorbě aplikačního software

Bachelor thesis focuses on information security, specifically on security policies and their effect on area of application software development. Information service management system ITIL and its influence are taken into account. Theoretical part of the thesis begins with an overview of information security in general using McCumber cube model, followed by overview of ITIL v2 and ITIL v3 systems. Their influence and effects on information security and application software development security is further analyzed in second chapter. Practical part covers the model security policy creation based on McCumber cube and ITIL recommendations. This policy is then expanded with rules and standards specific for software application development. Following the model creation, validity of the model policies is tested by comparing them with existing policies and standards. Finally, an example of application software compliance evaluation is provided. Main goal of this thesis, which is achieved in last two chapters, is a creation of model security policy and verification of its qualities based on comparison with existing policies and software.