Zoran ûosiÄ, Statheros ltd., Kastel Stari, Croatia, Marija Boban, University of Split - Faculty of Law,. Split, Croatia, Jasmin ûosiÄ, Ministry of Interior,Bihac, B&H.
18th Telecommunications forum TELFOR 2010
Serbia, Belgrade, November 23-25, 2010.
5LVN0DQDJHPHQW %XVLQHVV&RQWLQXLW\3ODQ DVIXQGDPHQWDODFWLYLWHVIRUDQLPSOHPHQWDWLRQ RI,QIRUPDWLRQ6HFXULW\0DQDJHPHQW6\VWHPV =RUDQûRVLü6WDWKHURVOWG.DãWHO6WDUL&URDWLD0DULMD%REDQ8QLYHUVLW\RI6SOLW)DFXOW\RI/DZ 6SOLW&URDWLD-DVPLQûRVLü0LQLVWU\RI,QWHULRU%LKDü% + PHDQV VKRZQ RQ ILOPV RU VSRNHQ LQ FRQYHUVDWLRQ :KDWHYHUIRUPWKHLQIRUPDWLRQWDNHVRUPHDQVE\ZKLFK LW LV VKDUHG RU VWRUHG LW VKRXOG DOZD\V EH DSSURSULDWHO\ SURWHFWHG ,W LV LPSRUWDQW WR VWUHVV WKDW LQIRUPDWLRQ VHFXULW\ LV WKH SURWHFWLRQ RI LQIRUPDWLRQ IURP D ZLGH UDQJH RI WKUHDWV LQ RUGHU WR HQVXUH EXVLQHVV FRQWLQXLW\ PLQLPL]H EXVLQHVV ULVN DQG PD[LPL]H UHWXUQ RQ LQYHVWPHQWVDQGEXVLQHVVRSSRUWXQLWLHV ,62 GHILQHV5LVN$QDO\VLVDV³V\VWHPDWLFXVHRI LQIRUPDWLRQ IRU LGHQWLILFDWLRQ RI FDXVH DQG ULVN HYDOXDWLRQ´ ZKHUH XQGHU ULVN LV LPSOLHG ³SUREDELOLW\ WKDW RQHWKUHDWZLOOVHL]HDVVHWVYXOQHUDELOLW\DQGFDXVHORVVWR RUJDQL]DWLRQ´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
$EVWUDFW² 7KLV SDSHU DGGUHVVHV WR WKH LPSRUWDQFH RI HVWDEOLVKLQJ WKH LQIRUPDWLRQ VHFXULW\ PDQDJHPHQW V\VWHPV ,606 DV D IRXQGDWLRQ IRU PDQDJLQJ DQ RUJDQL]DWLRQ¶V LQIRUPDWLRQ VHFXULW\ ULVNV 3UREDELOLW\ RI FRPSDQ\¶V EXVLQHVV VXFFHVV GHSHQGV RQ WKH HIILFLHQW GHVLJQ DQG LPSOHPHQWDWLRQ RI WKH ,606 WKDW LV LQIOXHQFHG E\ DFWXDO FRPSDQ\ QHHGV DQG REMHFWLYHV VHFXULW\ UHTXLUHPHQWV HPSOR\HG EXVLQHVV SURFHVVHV DQG RUJDQL]DWLRQDO RYHUDOO EXVLQHVV ULVNV )XUWKHU WKH DXWKRUV ZLOO JLYH WKH SUHVHQWDWLRQ RI WKH IXQGDPHQWDO DFWLYLWLHV RI %XVLQHVV &RQWLQXLW\ 3ODQ %&3 PHWKRGRORJ\ LQFOXGLQJ WKH PDLQ SURFHVVRIRSHUDWLRQDOFRQWLQXLW\
.H\ZRUGV²LQIRUPDWLRQVHFXULW\LQWHUQDWLRQDOVWDQGDUG ULVN PDQDJHPHQW ULVN DQDO\VLV VHFXULW\ WKUHDWV EXVLQHVV FRQWLQXLW\RSHUDWLRQVFRQWLQXLW\LPSDFWDQDO\VLV
, ,1752'8&7,21 1)250$7,21 LV WKH OLIHEORRG >@ RI EXVLQHVV DQG RUJDQLVDWLRQV DUH LQFUHDVLQJO\ GHSHQGHQW RQ WKH XVH RI LQIRUPDWLRQ V\VWHPV DQG QHWZRUNV WR SURFHVV LQIRUPDWLRQ &RPSXWHU ¶OLWHUDF\¶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¶V EXVLQHVV DQG FRQVHTXHQWO\QHHGVWREHVXLWDEO\SURWHFWHG$VDUHVXOWRI WKLV LQFUHDVLQJ LQWHUFRQQHFWLYLW\ LQIRUPDWLRQ LV QRZ H[SRVHG WR D JURZLQJ QXPEHU DQG D ZLGHU YDULHW\ RI WKUHDWV DQG YXOQHUDELOLWLHV >@ ,QIRUPDWLRQ FDQ H[LVW LQ PDQ\IRUPV LWFDQEHSULQWHGRUZULWWHQRQSDSHUVWRUHG HOHFWURQLFDOO\ WUDQVPLWWHG E\ SRVW RU E\ XVLQJ HOHFWURQLF
,
,, ,606,03/(0(17$7,21 6(&85,7@
6
$ ,QIRUPDWLRQV\VWHPYXOQHUDELOLW\
,GHQWLILFDWLRQ RI WKUHDWV WR FRPSDQ\ DVVHW VHFXULW\ DQG DFWLYHFRXQWHUPHDVXUHV $9XOQHUDELOLW\$QDO\VLV ,GHQWLILFDWLRQRILQQDWHYXOQHUDELOLW\IRUHDFKDQGHYHU\ FRPSDQ\DVVHWW\SRORJ\
,Q ,7 VHFWRU WKH JRDO RI ULVN DQDO\VLV DFWLYLW\ LV WR SHUFHLYH DQG TXDQWLI\ UHDO ULVNV WR ZKLFK ,QIRUPDWLRQ 6\VWHP LV YXOQHUDEOH WR 5LVN H[SUHVVHV SUREDELOLW\ WR RFFXU XQZDQWHG HYHQW WR VHFXULW\ V\VWHP ZLWK KDUPIXO FRQVHTXHQFH WR V\VWHP $FFRUGLQJ %XVLQHVV 'LFWLRQDU\ WKUHDW LV GHILQHG OLNH ³DFWLRQ RU SRWHQWLDO RFFXUUHQFH ZKHWKHU RU QRW PDOLFLRXV WR EUHDFK WKH VHFXULW\ RI WKH V\VWHP E\ H[SORLWLQJ LWV NQRZQ RU XQNQRZQ YXOQHUDELOLWLHV´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
,,, 5,6.$1$/@ % 6WHS 7KUHDWV ,QWKLVVWHSZHGHILQHWKUHDWVWKDWPLJKWFRPSURPLVHDOO W\SHV RI SURSHUW\ 7KH WKUHDWV LQFOXGH QDWXUDO GLVDVWHUV IORRGHDUWKTXDNH DQGSUREOHPVZLWKHOHFWULFSRZHUWKDW FDQ KDUP SDVVLYH LQIRUPDWLRQ V\VWHPV :H VKRXOG FRQVLGHUDOVRWKHWKUHDWVIURPPDQ¶VEHKDYLRUWKDWFDQEH PDOLFLRXV RU DFFLGHQWDO GDPDJHV $OO W\SHV RI WKUHDWV GR QRW FRQVLGHU DOO W\SHV RI SURSHUW\ EXW WKHUH LV D FHUWDLQ UHODWLRQEHWZHHQW\SHV :KHQ ZH GHWHUPLQH ZKDW WKUHDW FDQ DIIHFW WKH FHUWDLQ SURSHUW\ ZH DOVR GHWHUPLQH WKH OHYHO RI VHQVLWLYLW\ IRU HDFKW\SHRISURSHUW\:HXVHWKHIROORZLQJSDUDPHWHUV x HQGDQJHU ZKDW LV WKH UHVXOW RI HQGDQJHUHG SURSHUW\ SHUFHQW x IUHTXHQF\ KRZ RIWHQ ZH YHULI\ WKH WKUHDW LQ RQH \HDU
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
7$%/(, 35(6(17$17,212)(1$'$*(0(17$1')5(48(1&@ ,62,(& ,QWHUQDWLRQDO6WDQGDUG >@ $OLJQLQJ &R%LW ,7,/ DQG ,62 IRU %XVVLQHVV EHQHILW 0DQDJHPHQW VXPPDU\ LW60) ,QWHUQDWLRQDO 7KH ,7 6HUYLFH 0DQDJHPHQW)RUXP >@ 69LGDOLV $ %O\WK 8QGHUVWDQGLQJ DQG 'HYHORSLQJ D 7KUHDW $VVHVVPHQW 0RGHO 6FKRRO RI &RPSXWLQJ 8QLYHUVLW\ RI *ODPRUJDQ 3RQW\SULGG:DOHV8.2FWREHU >@ %XVLQHVV 'LFWLRQDU\ DYDLODEOH DW KWWS ZZZEXVLQHVVGLFWLRQDU\FRPGHILQLWLRQWKUHDWKWPO >@ %/7XUQHU 5RJHU(.DVSHUVRQ $ IUDPHZRUN IRU YXOQHUDELOLW\ DQDO\VLVLQVXVWDLQDELOLW\VFLHQFH1DWLRQDODFDGHP\RIVFLHQFH > @ =ûRVLü 0 %REDQ %XVLQHVV FRQWLQXLW\ SODQ PHWKRGRORJ\ ± FKDOOHQJHV RI ULVN PDQDJHPHQW RQ WKH ZD\ WR EXVLQHVV VXFFHVV LQ GLJLWDOHFRQRP\0 6 ýDNRYHF&URDWLD >@ +HFKW -HIIUH\ $ %XVLQHVV &RQWLQXLW\ 0DQDJHPHQW&RPPXQLFDWLRQV RI WKH $VVRFLDWLRQ IRU ,QIRUPDWLRQ 6\VWHPV 9RO$UWLFOH >@ /RULQ 0+LWW '-:X ;LRDRJH =KRX -RXUQDO RI PDQDJHPHQW ,QIRUPDWLRQV\VWHPV6XPPHU
