04415ntm a22006137i 4500 000716584 CZ-PrVSE 20240901121857.0 m d cr n|||||||||| 240901s2024 xr fsbm 000 0 eng d NEZPRACOVANÝ IMPORT ABA006 cze ABA006 ABA006 rda Ravindranathan, Rahul Nair ISIS:172416 dis Migration of Information security risk assessment from On-premise to Cloud eng Migration of Information security risk assessment from On-premise to Cloud / Rahul Nair Ravindranathan 2024 ?? stran : digital, PDF soubor Vedoucí práce: Majid Ziaei Nafchi Diplomová práce (Ing.)—Vysoká škola ekonomická v Praze. Fakulta informatiky a statistiky, 2024 Obsahuje bibliografii Textový (vysokoškolská kvalifikační práce) Rok obhajoby 2024 The migration of information security risk assessment (ISRA) from on-premise to cloud environments presents a complex array of challenges and opportunities for modern organizations. As businesses increasingly adopt cloud computing to leverage its scalability, cost-efficiency, and flexibility, they must also navigate the unique security risks inherent in these platforms. Traditional ISRA frameworks, well-suited to static and controlled on-premise environments, often fall short when applied to the dynamic and decentralized nature of cloud computing. This thesis explores the inherent differences in risk profiles between on-premise and cloud-based infrastructures, evaluating the effectiveness of existing risk assessment methodologies in the context of cloud migration. Through a combination of theoretical analysis and empirical research, this study proposes a framework specifically tailored to enhance ISRA for cloud environments. To gather comprehensive insights, the research methodology included 23 in-depth interviews with industry experts and a detailed survey distributed to security professionals across various sectors. The interviews provided qualitative data on the challenges and strategies experienced by organizations during their transition to the cloud, highlighting gaps in traditional risk assessment approaches. The survey offered quantitative data on the effectiveness of current methodologies and specific security incidents encountered in cloud environments. Key findings emphasize the necessity for ongoing surveillance, real-time risk assessment, and the integration of advanced technologies such as machine learning and artificial intelligence to improve threat identification and response. This research underscores the need for a holistic and adaptive ISRA framework to address evolving threats and vulnerabilities in cloud computing, ultimately contributing to the development of more resilient and secure cloud infrastructures. Způsob přístupu: Internet information systems management [obor dipl. práce] diplomové práce fd132022 czenas master's theses eczenas Cloud Computing Cloud Migration Information Security Risk Assessment Cloud Security On-Premise Security Risk Management Security Frameworks ISO/IEC 27001 NIST SP 800-30 Continuous Monitoring Information Security Management System Ziaei Nafchi, Majid ISIS:152610 ths Sudzina, František ISIS:137922 opn Vysoká škola ekonomická v Praze. Fakulta informatiky a statistiky kn20010709399 dgg https://insis.vse.cz/zp/86283/podrobnosti VŠKP v InSIS https://insis.vse.cz/zp/86283 Hlavní práce https://insis.vse.cz/zp/86283/posudek/vedouci Hodnocení vedoucího https://insis.vse.cz/zp/86283/posudek/oponent/83845 Oponentura https://insis.vse.cz/zp/86283/priloha/29276 Přiloha k práci https://insis.vse.cz/zp/86283/priloha/29277 Přiloha k práci https://insis.vse.cz/zp/86283/podrobnosti dc:identifier NEPOSILAT VSKP vse86283 240827 86283