Browsing by Author "Kampová, Katarína"

Now showing 1 - 3 of 3

Kontinuita podnikania ako strategický nástroj v nestabilnom prostredí
(University of Žilina, 2024) Kampová, Katarína; Mariš, Ladislav; Lusková, Mária; Dolnák, Ivan
Business continuity management (BCM) has become a critical element in corporate strategy, ensuring organizations are equipped to handle and recover from disruptive incidents and crises. The core of BCM is the business impact analysis (BIA), which assesses the potential consequences of business interruptions to determine the maximum acceptable outage (MAO) critical for designing recovery strategies. This article discusses the application of BIA alongside risk assessment to create a comprehensive framework for organizations to anticipate and prepare for threats, exemplified through a simplified case study that demonstrates how these tools can enhance a company's resilience to unforeseen events.
Testovanie pripravenosti na phishingový útok v zdravotníckych zariadeniach
(Žilinská univerzita v Žiline, 2022) Madleňák, Matúš; Kampová, Katarína
This article deals with testing the preparedness of a selected group of users for phishing attacks. It consists of a theoretical and a practical part. The theoretical part defines the basic framework of phishing attacks. It describes the basic knowledge and definitions that need to be mastered to understand the given area. The practical part consists of testing the preparedness of a specific reference group of users through phishing training and phishing tests. The data collected from thetesting was further analysed and compared to determine the potential use of phishing training and phishing testing in organisations.
Výzvy v procese identifikácie rizík v manažmente informačnej bezpečnosti
(University of Žilina, 2024) Kampová, Katarína; Loveček, Tomáš
The article focuses on risk identification as a crucial process within the broader framework of information security management. It highlights the challenges posed by inconsistent legislative requirements and the need for harmonization through international standards, specifically STN ISO/IEC 27005:2023. The authors discuss the importance of a systematic approach to risk management, detailing how the accurate identification of risks influences subsequent phases like analysis, evaluation, and treatment of risks. The article also compares current cybersecurity legislation with international standards, offering insights into best practices for effective risk management in organizations. The conclusions emphasize the need for integrating these standards to ensure consistency and resource efficiency in practice.