Audit ISMS s použitím normy ISO/IEC 27002:2013

This bachelor thesis is based on knowledge and concepts in the field of information security and its management. The thesis is divided into three parts. The first part describes definitions and terminology related to information security management and the process of auditing the information security. The first part also emphasizes the life cycle of the information security management system with respect to the international standards ISO/IEC 27001:2013 and ISO/IEC 27002:2013. The second part deals with the description of individual methodologies used in the practical part of the thesis. The methodologies are then applied in the third part of the work, which aims to identify shortcomings in the field of security management in a particular company, furthermore to propose appropriate measures and possible implementation of these measures according to best practices listed in the international standard ISO/IEC 27002:2013.