TFL Vsebine / Revija SIR*IUS

Business Continuity Audit

Napadi z izsiljevalskim programjem od prve polovice 2017 v Sloveniji in svetu nas opozarjajo, kako zelo smo ranljivi na tem področju. Prav tako nas je žled v delu Slovenije leta 2014 opozoril, kako smo ranljivi pri naravnih nesrečah. Zato moramo poskrbeti, da pri kibernetskih napadih in naravnih nesrečah svoje poslovanje ponovno vzpostavimo na vnaprej dogovorjeno sprejemljivo raven za uporabnike in lastnike. Z upravljanjem neprekinjenega poslovanja lahko organizacije zmanjšajo tveganja na tem področju. Preverjanje oziroma analiziranje stanja neprekinjenega poslovanja v organizaciji izvedemo s presojami, revizijami in drugimi analizami. Prispevek predstavlja izvedbo revizije učinkovitosti upravljanja neprekinjenega poslovanja v javni organizaciji, ki ga je izvedlo Računsko sodišče Republike Slovenije.

Ransomware attacks since the first half of 2017 in Slovenia and the world remind us of our vulnerabilities. Additionally the glazed-frost natural disaster in 2014, that severely damaged our local infrastructure, exposed our vulnerabilities to natural disasters. For these reasons we have to ensure, that both in cases of cyber-attacks as well as in cases of natural disasters, our business can be recovered as soon as possible to the level, agreed with customers and owners. Organizations can mitigate the risk of disruptions with business continuity management. Checking or analyzing the level of business continuity management within the organization can be done either through an audit or as an assessment, as well as trough another type of analysis. The paper is a case study of the audit of business continuity management efficiency within a public organization, performed by the Court of Audit of the Republic of Slovenia.