fullrecord |
[{"key": "dc.contributor.advisor", "value": "Siponen, Mikko", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "Eerola, Jyrki", "language": "", "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2021-11-26T06:55:51Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2021-11-26T06:55:51Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2021", "language": "", "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/78802", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Organisaatiot voivat osoittaa tietoturvansa tason t\u00e4ytt\u00e4m\u00e4ll\u00e4 tunnettujen kriteerist\u00f6jen vaatimuksia. Tietoturvan hallintaj\u00e4rjestelm\u00e4standardin ISO/IEC 27001 vaatimustenmukaisuus voidaan osoittaa sertifioinnilla, jolloin tarkastusty\u00f6n tekev\u00e4n sertifiointielimen pit\u00e4\u00e4 t\u00e4ytt\u00e4\u00e4 auditointia ja sertifiointia koskevan ISO/IEC 27006 -standardin vaatimukset. Kansainv\u00e4lisen varmennustoimeksiantoja koskevan standardin ISAE 3000 mukaan puolestaan voidaan osoittaa yhdenmukaisuus melkein mink\u00e4 tahansa soveltuvan kriteerist\u00f6n kanssa. T\u00e4m\u00e4n tutkimuksen aiheena on selvitt\u00e4\u00e4 ISO/IEC 27006- ja ISAE 3000 -standardien mukaisesti teht\u00e4vien tietoturvan varmennusten yhdistett\u00e4vyytt\u00e4 ja yhdist\u00e4misen mahdollisia hy\u00f6tyj\u00e4. \nTutkimus on toteutettu laadullisena tapaustutkimuksena, jonka tapausluonne perustuu siihen, ett\u00e4 kohteena on kaksi erillist\u00e4 standardia. Tutkimuksen aineistoina on k\u00e4ytetty ISO/IEC 27006- ja ISAE 3000 -standardeja sek\u00e4 tietoturva-alalla ty\u00f6skentelevien asiantuntijoiden haastatteluja. Sek\u00e4 standardien sis\u00e4lt\u00f6\u00e4 ett\u00e4 haastatteluaineisto on analysoitu teoriaohjaavan sis\u00e4ll\u00f6nanalyysin keinoin.\nTutkimuksen tulosten perusteella voidaan p\u00e4\u00e4tell\u00e4, ett\u00e4 ISO/IEC 27006- ja ISAE 3000 -standardien mukaan teht\u00e4v\u00e4t tietoturvan auditoinnit ja varmennukset ovat osittain yhdistett\u00e4viss\u00e4. Yhdistett\u00e4ess\u00e4 varmennuksia on huomioitava varmennuksen kohde ja laajuus, tarkastajalle asetettavat, eri standardeista riippuvat osaamis- ja p\u00e4tevyysvaatimukset, osin eroavat tarkastusprosessit sek\u00e4 k\u00e4ytett\u00e4vien kriteerist\u00f6jen yhdistett\u00e4vyys.\nYhdistetyst\u00e4 varmennuksesta hy\u00f6tyv\u00e4t sek\u00e4 tarkastuksen kohdeorganisaatio ett\u00e4 toimittaja. Kohdeorganisaatio voi saavuttaa markkinaetua osoittamalla vaatimustenmukaisuutensa kahden eri viitekehyksen kanssa. Tarkastusten yhdist\u00e4minen lis\u00e4\u00e4 resurssien k\u00e4yt\u00f6n tehokkuutta ja siten tuottaa taloudellista etua niin kohdeorganisaatiolle kuin toimittajalle.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by Paivi Vuorio (paelvuor@jyu.fi) on 2021-11-26T06:55:51Z\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2021-11-26T06:55:51Z (GMT). No. of bitstreams: 0\n Previous issue date: 2021", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "78", "language": "", "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.format.mimetype", "value": "application/pdf", "language": null, "element": "format", "qualifier": "mimetype", "schema": "dc"}, {"key": "dc.language.iso", "value": "fin", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.subject.other", "value": "varmennus", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "ISO/IEC 27001", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "ISO/IEC 27006", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "ISAE 3000", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "yhdistelm\u00e4auditointi", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.title", "value": "Yhdistetty tietoturvan varmennus standardien ISO/IEC 27006 ja ISAE 3000 mukaisesti", "language": "", "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "master thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-202111265809", "language": "", "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Pro gradu -tutkielma", "language": "fi", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Master\u2019s thesis", "language": "en", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Informaatioteknologia", "language": "fi", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Information Technology", "language": "en", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Kyberturvallisuus", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Kyberturvallisuus", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "yvv.contractresearch.funding", "value": "0", "language": "", "element": "contractresearch", "qualifier": "funding", "schema": "yvv"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_bdcc", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "masterThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.subject.oppiainekoodi", "value": "601", "language": "", "element": "subject", "qualifier": "oppiainekoodi", "schema": "dc"}, {"key": "dc.subject.yso", "value": "standardit", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "tietoturva", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "auditointi", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.format.content", "value": "fulltext", "language": null, "element": "format", "qualifier": "content", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}, {"key": "dc.type.okm", "value": "G2", "language": null, "element": "type", "qualifier": "okm", "schema": "dc"}]
|