Návrh kontrol systému řízení přístupů a správy identit

Nowadays, the focus of IT security is increasingly concerned with the safety of the identities of employees and users of information systems. This phenomenon is even more compounded by the rapidly growing number of cloud services. This thesis briefly explains the basic concepts of access control and identity management. The thesis also contains identification of requirements and implications of risks on identity and access management system. The main objective is the general design of controls for identity and access management system, which has been designed to match legislative requirements, regulations, standards or frameworks commonly used in enterprise IT practice. For describing of the controls, mainly Cobit framework and IT Assurance Guide were used. The thesis also contains a suggestion how to adjust proposed controls in a cloud environment.