Search

Namen prispevka: Namen prispevka je analizirati dovzetnost in ranljivost zapornikov, oseb v probaciji in prosilcev za mednarodno zaščito za radikalizacijo, ki vodi v nasilni ekstremizem. Proučiti želimo izkušnje iz slovenske prakse in na tej podlagi identificirati indikatorje, ki bi lahko služili za zgodnjo detekcijo tveganj za radikalizacijo pri analiziranih skupinah. Metode: Indikatorji za analizo tveganj, povezanih z radikalizacijo, so bili identificirani v večdelni raziskavi, ki je obsegala pregled literature in primerov iz praks, terensko anketiranje med policisti, ki se ukvarjajo s preiskovanjem ter preprečevanjem radikalizacije, ter fokusno skupino, v katero so bili vključeni strokovnjaki s področja izvrševanja kazenskih sankcij. Ugotovitve: Rezultati raziskave so pokazali, da je ranljivost in dovzetnost za radikalizacijo, ki vodi v nasilni ekstremizem, mogoče prepoznati na podlagi zunanjih in notranjih indikatorjev, povezanih z vedenjem, socializacijo in osebnimi prepričanji, ob upoštevanju kontekstualnih okoliščin analiziranih populacij. Kljub prepoznavanju potencialnih tveganj za radikalizacijo zapornikov, oseb v probaciji in prosilcev za mednarodno zaščito med ključnimi deležniki, ki se ukvarjajo s problematiko radikalizacije, je pojavnost radikalizacije med analiziranimi skupinami v Sloveniji zaenkrat relativno redka. Omejitve/uporabnost raziskave Zaradi omejenega števila strokovnjakov, ki se v Sloveniji ukvarjajo s preprečevanjem in preiskovanjem radikalizacije, sta bili empirični raziskavi opravljeni na manjšem vzorcu izpraševancev. Rezultati, ki dajejo vpogled v trenutno stanje radikalizacije med različnimi ranljivimi skupinami v Sloveniji, so uporabni za strateško in operativno raven varnostnih strokovnjakov, tako pri načrtovanju kot izvajanju programov preprečevanja radikalizacije, odvračanja od radikalizacije ter deradikalizacije. Izvirnost/pomembnost prispevka: Prispevek z večdelno raziskavo, ki vključuje kombinacijo različnih raziskovalnih metod, prikazuje izkušnje iz prakse in daje vpogled v trenutno stanje na področju radikalizacije med zaporniki, osebami v probaciji in prosilci za mednarodno zaščito. Gre za prvo raziskavo v Sloveniji, ki proučuje dovzetnost specifičnih ranljivih skupin. Nabor predstavljenih indikatorjev za prepoznavanje tveganj za radikalizacijo pa je uporaben za razvoj nacionalnih in lokalnih strategij v prihodnje. Purpose: The purpose of the article is to analyse the susceptibility and vulnerability of prisoners, persons in probation, and asylum seekers for radicalisation leading to violent extremism to examine experiences from Slovenian practice, and on this basis identify indicators that could serve for early detection of risks of radicalisation in the analysed groups. Design/Methods/Approach: Potential indicators for analysis of risks associated with radicalisation were identified in a multipart survey that included a review of literature and case studies, a field survey of police officers involved in the investigation and prevention of radicalisation, and a focus group with experts responsible for enforcement of penal sanctions. Findings: The results of the study showed that vulnerability and susceptibility to radicalisation leading to violent extremism can be identified on the basis of external and internal indicators related to behaviour, socialization and personal beliefs, taking into account the contextual circumstances of the analysed populations. Despite recognizing the potential risks for the radicalisation of prisoners, persons in probation, and asylum seekers among key stakeholders dealing with the issue of radicalisation in Slovenia, the perception of such phenomena in practice is rare. Research Limitations / Implications: Due to the limited number of experts involved in prevention and investigation of radicalisation in Slovenia, empirical research has been conducted on a smaller sample of respondents. The results that give insight into the current state of radicalisation among various vulnerable groups in Slovenia are useful for the strategic and operational level of experts, both in planning and implementing programmes for prevention of radicalisation and programmes of deradicalisation. Originality/Value: Through a multipart survey involving a combination of different research methods, the article presents practical experiences and provides an insight into the current state of radicalisation among prison population, persons in probation and asylum seekers. This is the first survey in Slovenia to examine the susceptibility of specific vulnerable groups. The set of presented indicators for identification of risks of radicalisation is useful for the development of national and local strategies in the future.

Namen prispevka: Opozoriti želimo na tveganja, ki so jim izpostavljeni vsi informacijski sistemi in jih prinaša informacijsko bojevanje. Z razvojem sodobne informacijskokomunikacijske tehnologije (v nadaljevanju IKT) je vojaško, politično, gospodarsko in ideološko motivirano bojevanje pridobilo popolnoma nove razsežnosti in nevarnosti, čeprav se njene resnosti marsikatera država še vedno ne zaveda. Zaradi anonimnosti, možnosti dostopanja z oddaljene lokacije in zakrivanja izvora napada, storilci svoje cilje dosegajo lažje in hitreje, kot je to bilo mogoče pred razvojem spleta in informacijske tehnologije. To je omogočilo razvoj in prenos informacijskega bojevanja na različna družbena področja. Ker pa so tehnike informacijskega bojevanja postale primerljive z ostalo (klasično) računalniško kriminaliteto, je kompleksnost problematike še toliko širša. Resnost in nevarnost tovrstne grožnje prikazujemo skozi primere. S predstavitvijo trenutne zakonske ureditve v Sloveniji pa želimo prikazati neustrezno normativno podlago za delo organov pregona. Trenutna zakonska ureditev omogoča stanje, v katerih je primere informacijskega bojevanja lažje vršiti kot preganjati. Metode: Podan je pregled definicij informacijskega bojevanja v strokovni literaturi. Na podlagi analize definicij je predlagana konkretna in natančnejša opredelitev pojava informacijskega bojevanja. Kratko so predstavljeni nekateri primeri kibernetskih napadov, ki potrjujejo obstoj tovrstne grožnje. Analizirana je aktualna zakonodaja v Republiki Sloveniji. Na podlagi ugotovljenih slabosti so podani utemeljeni predlogi za izboljšave zakonodaje. Ugotovitve: Temeljna ugotovitev prispevka je, da se je (informacijsko) bojevanje, kot tradicionalni način doseganja ciljev, z razvojem sodobne IKT razširilo v vse sfere družbenega življenja, skladno s tem pa so se spremenile tudi njegove tehnike delovanja. Kibernetsko okolje je tej grožnji omogočilo neobvladljivo širjenje, kar je povzročilo novo globalno/transnacionalno tveganje za države in organizacije. Gospodarstvo, kritična infrastruktura, politični odnosi in svetovni mir so tista temeljna področja, ki jih informacijsko bojevanje želi kompromitirati. Kot kaže trenutno stanje normativne ureditve informacijskega bojevanja, so na nacionalni ravni naše države pomanjkanje politične volje, nerazumevanje in ravnodušnost temeljni atributi, ki omogočajo obstoj in razvoj informacijskega bojevanja. Na ravni svetovnih velesil in mednarodnih organizacij pa gre, zaradi zavedanja in uporabe prednosti tovrstnega bojevanja, za poskus ohranjanja neurejenega stanja, saj z informacijskim bojevanjem napadajo normativno ureditev. Izvirnost/pomembnost prispevka: Izvirna vrednost prispevka je opredelitev informacijskega bojevanja. Poleg tega pa je pomemben tudi prikaz narave informacijskega bojevanja na primerih in stanje normativne ureditve. Slednje je glavni zaviralec za preprečevanje opisane problematike. Purpose: The purpose of this paper is to draw attention to security risks to information systems which confront every country and organization – the risk in question is information warfare. Development of modern information communication technology has led us to the situation in which politically, economically and ideologically motivated warfare has gained a completely new dimension and constitutes new dangers, but many countries still don’t acknowledge its presence. Anonymity, the possibility of accessing information from distant locations, and the possibility of concealing the source of the attack are enabling perpetrators to achieve their vicious goals much easier and faster than before the development of the Internet and information technology in general. Development made it possible for information warfare to spread to different social spheres. The complexity of this modern threat has become much more worrisome, because techniques of information warfare have became comparable with other (classic) computer crimes. We would like to demonstrate the gravity and danger of this threat through practical examples and present the current legal regulation of this issue in Slovenia. The current Slovenian legislation creates conditions in which it is easier to commit information warfare than prosecute it. Design/Methods/Approach: In forming a definition of information warfare, we used a comparative method. We carried out a comparison of different written sources published abroad. For better understanding the nature of modern warfare, we presented some practical examples. An understanding of the legislation in the Republic of Slovenia in reference to these issues was acquired through a thorough study and comparison of Slovenian legal acts. Findings: The main finding of this paper is that information warfare, which was used in the past for military purposes, has now (with the development of modern technology) spread into every area of society. Simultaneously the techniques of information warfare have also changed. Cyber space allowed information warfare to extend uncontrollably, and this resulted in the birth of new transnational and global threats to all countries and organizations. Economies, crucial national infrastructure, political relations and world peace are the main areas that information warfare tries to compromise. The current legislation, at the national and global levels, reflects, that a lack of political will, incomprehension and apathy are the major factors which allow information warfare to exist and develop. Originality/Value: The originality of this paper is in the suggested definition of information warfare, and further in the presentation of the nature of this specific threat through practical examples and an overview of the relevant legislature, which is the main obstacle in the prevention of this type of criminality.

Purpose: Modern organizations are no longer able to operate and achieve their goals without information technology. The only stability in the modern world is change, and users adjust to them, as do the threats to information technology. Therefore, the only way to control threats to information security is to execute a process of risk management, which enables organizations to manage threats. This paper introduces various ways of managing information security threats and researches the existence of risk management systems in Slovenia. Design/Methods/Approach: The study focused on the research of the perception of information security risk management among Slovenian organizations. For this purpose, research has been conducted in different organizations. The results of this research revealed that threats to information security are largely not fully comprehended. Moreover, the structure of risk management systems depends completely on each individual organization. The problem is therefore the fact that there are as many systems as there are organizations. In theory, any information system must be examined thoroughly before risk management systems are established. It is important to know the weaknesses of the system, possible threats to it and ways of attack, and what consequences follow. Findings: Risks can be managed in different ways. Organizations choose mostly among the following approaches: (1) informal or unsystematic approach (2) general approach, which provides the same protection mechanism for every organizational level (3) exact approach, which refers to an analysis of the entire information system (4) a combination of a general and an exact approach. When organizations choose their approach, they establish the control mechanisms. With these mechanisms it is possible to simply avoid risks, mitigate their consequences, accept a particular risk, or introduce adequate security mechanisms. Due to continual changes such systems must be constantly evaluated and improved. This means that systems must be constantly adjusted to new types of threats. By establishing a safe information system, organizations can consider different trends, recommendations and effective practices for instance the ISO 27000 series of standards. In the process of managing information security, it is of great significance to establish a risk management system, to be able to recognize the most exposed areas, and to protect them accordingly. Research limitations: Research results cannot be generalized due to the relatively small number of companies interviewed. Practical implications: This paper represents a useful source of information for companies establishing information security risk management systems, and it represents the basis for further research. Originality/Value: Guidelines for establishing a secure information system and forms conclusions on how these guidelines are considered in practice are represented. The study has original value because it is based on a research of the current state of risk management procedures in different organizations. Organizations can consider different guidelines, recommendations and good practices for establishing their own effective information security. Findings show that defining management responsibility, identifying key vulnerabilities and securing them, are the three most significant elements in effective risk management and maintenance of information security. Namen prispevka: V sodobnem času organizacije ne morejo optimalno funkcionirati in dosegati zastavljenih ciljev brez informacijske tehnologije. Edina stalnica so spremembe, katerim se poleg uporabnikov prilagajajo tudi grožnje v informacijskem okolju. Iz tega sledi, da je vodenje procesa upravljanja s tveganji edini način obvladovanja in upravljanja omenjenih groženj. Predstavljamo načine in naravo upravljanja informacijske varnosti ter prikazujemo trenutno stanje omenjenih procesov v slovenskem prostoru. Metode: Prispevek se osredotoča na razumevanje informacijske varnosti in z njo povezanega sistema upravljanja s tveganji med slovenskimi organizacijami. V ta namen je bila izpeljana raziskava z usmerjenimi intervjuji v različnih slovenskih podjetjih. Rezultati kažejo, da grožnje informacijski varnosti v večini organizacij niso ustrezno razumljene, poleg tega pa je proces upravljanja s tveganji preveč odvisen od posamezne organizacije. Problem se kaže v tem, da poznamo toliko sistemov upravljanj s tveganji, kolikor imamo organizacij. Teoretično pa bi vsak informacijski sistem moral biti podvržen natančni analizi, preden se sistem upravljanja s tveganji vzpostavi in vpelje v organizacijsko strukturo. Poznavanje organizacijskih ranljivosti, potencialnih groženj in posledic, ki bi ob njihovem uresničenju nastale, pa je pri tem ključnega pomena. Ugotovitve: S tveganji lahko upravljamo na različne načine, organizacije pa lahko v grobem izbirajo med štirimi različnimi pristopi: (1) neformalen ali nesistematičen pristop, (2) splošen pristop, s katerim se vzpostavlja enaka zaščita na različnih organizacijskih ravneh, (3) natančna analiza celotnega informacijskega premoženja, (4) kombinacija splošnega in natančnega pristopa. Ko organizacija izbere enega izmed pristopov mora vzpostaviti ustrezne kontrolne oz. zaščitne mehanizme, s katerimi se lahko tveganjem preprosto izogne, prenaša posledice na druga okolja, grožnje sprejema ali pa vpelje ustrezno stopnjo zaščite. Zaradi nenehnih sprememb, predvsem v informacijskem okolju, pa je potrebno vpeljane nadzorne mehanizme stalno ocenjevati in posodabljati, kar pomeni, da ga je potrebno nenehno prilagajati novim tipom groženj. Pri vzpostavljanju ustreznega in varnega informacijskega sistema si lahko organizacije pomagajo z različnimi priporočili in dobrimi praksami, med katere vsekakor uvrščamo serijo standardov ISO 27000. V procesu upravljanja s tveganji je ključnega pomena vzpostavitev sistema, ki je sposoben identificirati grožnjam najbolj izpostavljena območja in jih tudi ustrezno zavarovati. Omejitve raziskave: Rezultatov raziskave ne moremo posploševati, saj je število organizacij vključenih v raziskavo relativno majhno. Praktična uporabnost: Prispevek predstavlja uporaben vir informacij za podjetja, ki vzpostavljajo sisteme upravljanja z informacijsko varnostjo, prav tako pa predstavlja osnovo za nadaljnje raziskave. Izvirnost/pomembnost prispevka: Predstavljene so smernice pri vzpostavljanju sistema informacijske varnosti in ugotovitve, kako so te smernice uporabljene v praksi. Prispevek ima izvirno vrednost, ker je osnovan na raziskavi trenutnega stanja procesov upravljanja s tveganji v različnih organizacijah. Le-te lahko pri vpeljevanju učinkovite informacijske varnosti upoštevajo različne smernice, priporočila in uspešne prakse. Rezultati raziskave kažejo, da so razumevanje odgovornosti managementa, prepoznavanje ključnih ranljivosti in zaščita le-teh trije najpomembnejši elementi pri učinkovitem upravljanju s tveganji in vzdrževanju informacijske varnosti.

Namen prispevka: S prispevkom želimo predstaviti sinergijo učinkov nerealnih predstav o tehnologiji in terorizmu, realne sposobnosti in aktivnosti kibernetskih teroristov, hkrati pa opozoriti na grožnjo, ki je z vidika informacijske varnosti, predvsem na nacionalni ravni, ne smemo zanemariti. Metode: V prispevku je uporabljena deskriptivna metoda in metoda komparacije, s katerima smo analizirali predpostavke strokovnih in znanstvenih prispevkov na obravnavano tematiko. Z metodo sinteze spoznanj smo nadgradili trenutne teoretične pristope pri pojasnjevanju narave storilcev kibernetske kriminalitete in kibernetskega terorizma. Ugotovitve: Zaradi razvoja globalnega kibernetskega prostora je kriminaliteta pridobila povsem nove razsežnosti in priložnosti. Tako kot uporabniki sodobne tehnologije in klasični zlonamerni storilci v tem prostoru delujejo tudi kibernetski teroristi, katerih namen je s pomočjo tehnologije povzročiti čim večji strah in medijsko odzivnost. Psihološki učinki uporabe tehnologije prispevajo k temu, da kibernetski terorizem spremlja visoka stopnja nerazumevanja, posledično pa tudi strahu. Ker tovrstna kibernetska kriminaliteta nima urejene politične in pravne podlage, to skupaj z nerazumevanjem sodobne tehnologije, strahu pred njeno uporabo in možnimi zlorabami povzroča velik učinek zastraševanja. Čeprav kibernetski terorizem predstavlja resno grožnjo nacionalnim in organizacijskim informacijskim infrastrukturam, je njegovo udejanjanje v fizičnem okolju zgolj posredno. Teroristi sodobno tehnologijo za enkrat izkoriščajo predvsem kot orodje za pomoč pri načrtovanju napadov in ohranjanju lastnega obstoja. Izvirnost/pomembnost prispevka: Pomembnost prispevka se kaže v njegovi aktualnosti. Tako kot klasična kibernetska kriminaliteta tudi kibernetski terorizem postaja vse pogostejša tematika medijev in polemičnih razprav. S senzacionalnim poročanjem se velikokrat povzročajo dramatične in nerealne asociacije na kibernetski terorizem, v smislu možnih scenarijev in posledic. V prispevku predstavljamo njegove realne zmožnosti in temeljne značilnosti, izvirnost pa se kaže v njegovi pojasnjevalni in razlagalni vlogi. Purpose: This paper intends to present the synergy between unrealistic notions about technology and terrorism and the cyberterrorists’ real capabilities and activities. At the same time, the paper also points to the threat, which must not be neglected from the information security point of view, particularly at the national level. Design/Methods/Approach: The paper presents the use of descriptive and comparative methods, which were applied to analyse several assumptions found in professional and scientific publications in the relevant field. The synthesis method was then applied to consider the findings and upgrade current theoretical approaches in order to explain the nature of cybercrime and cyberterrorism perpetrators. Findings: Due to the development of global cyberspace, crime gained entirely new dimensions and opportunities. Apart from modern technology users and typical malevolent perpetrators, cyberterrorists, whose intention is to instigate as much fear and media attention as possible by using technology, are also operating in cyberspace. Psychological effects stemming from the use of technology contribute to the fact that cyberterrorism is characterised by a high level of misunderstanding and consequently fear. When considered in combination with the lack of understanding of modern technology, as well as the fear of its use and potential abuse, the fact that this type of cybercrime does not have a structured political and legal basis generates major intimidation effects. Although cyberterrorism represents a serious threat to information infrastructures owned by states and organisations, its actualisation in the physical environment is merely indirect. At the moment, terrorists mostly use modern technology as instrumentalities for planning attacks and preserving their own existence. Originality/Value: The importance of this paper is demonstrated by its up-to-date nature. Apart from traditional cybercrime, cyberterrorism is also becoming a subject of ever more frequent media attention and controversial debates. Sensationalist reporting often generates dramatic and unrealistic notions regarding cyberterrorism, as well as its potential scenarios and implications. This paper, however, presents the true capabilities and basic characteristics of cyberterrorism, while its originality is demonstrated by its explanatory and interpretative nature.

Purpose: Information security should be a strategic goal of every responsible and safety-conscious organisation that wants to follow current security and technological trends. The purpose of this paper is to summarize the corporate practices in addressing IT risks, to explain the benefits of a comprehensive approach to information security as a business function, and to improve understanding of the current issues associated with its management. Design/Methods/Approach: Topics presented in this paper were analysed using descriptive and qualitative analysis of international reports and surveys. The findings obtained using the comparative method and their synthesis are supported by other research in this area. Findings: Due to the large volume of information assets, sophisticated IT threats and the heterogeneous nature of security factors, the efficiency of information security is very difficult to achieve. It has been observed that many organisations are at an early stage in developing a comprehensive approach to information security, since, in practice, they are still dealing with the problems of the past, yet they are very consistent with tracking user trends. This disproportionate situation represents a major security challenge for an organisation’s management. Practical Implications: The findings of this research are useful for the further analysis and evaluation of information security and victimization of cybercrime, and are also applicable to facilitating strategic planning and decision making. Originality/Value: Based on the review of the current corporate state, this paper presents baseline information and security situations in the business environment and evaluates the efficiency of information security as a business tool. Based on the results, contemporary security challenges and organisational guidelines for the future were identified. Namen prispevka: Informacijska varnost mora biti cilj vsake organizacije, ki želi odgovorno slediti tehnološkim trendom. Namen prispevka je analizirati prakso organizacij pri soočanju z informacijskimi tveganji, pojasniti prednosti celovite ureditve informacijske varnosti kot poslovne funkcije in izboljšati razumevanje aktualnih problemov, povezanih z njenim upravljanjem. Metode: Uporabljena je deskriptivna metoda in vsebinska analiza mednarodnih poročil in raziskav, povezanih z informacijsko varnostjo. Ugotovitve pridobljene s komparativno metodo in zaključki so podprti z drugimi strokovnimi viri. Ugotovitve: Zaradi velikega obsega informacijskega premoženja, sofisticiranih informacijskih groženj in heterogene narave varnostnih dejavnikov je učinkovitost informacijske varnosti težko uresničljiv cilj. Ugotavljamo, da je veliko organizacij pri celoviti obravnavi informacijske varnosti šele na začetni stopnji, saj se v praksi podjetja še vedno ukvarjajo z zastarelimi problemi, medtem ko je sledenje uporabniškim trendom zelo aktualno. Takšno stanje predstavlja velik izziv za management organizacij. Praktična uporabnost: Ugotovitve prispevka so uporabne na znanstveno-raziskovalnem področju oz. ravni analiziranja in ocenjevanja informacijske varnosti, viktimizacije ter upravljavskem nivoju, za lažje strateško načrtovanje in sprejemanje odločitev. Izvirnost/pomembnost prispevka: Prispevek s pregledom stanja predstavlja izhodiščno informacijskovarnostno situacijo v poslovnem okolju in podaja oceno razvitosti ter učinkovitosti informacijske varnosti kot poslovne funkcije. Na podlagi analize rezultatov so identificirani tudi sodobni varnostni izzivi in organizacijske smernice za prihodnost.

Namen prispevka: V preglednem znanstvenem prispevku analiziramo aktualne varnostne trende in sociološke ter psihološke ovire, s katerimi se sooča varnostni management, z namenom pojasniti dileme pri zagotavljanju informacijske varnosti. V času negotovih razmer v poslovnem okolju postaja informacijska varnost vse pomembnejši poslovni proces. Učinkovitost je pogojena z različnimi okoljskimi, strukturnimi in osebnostnimi dejavniki, ki jih je potrebno upravljati, če se želi ustrezno obvladovati tveganja, ki ogrožajo obstoj organizacij. Metode: Analiza varnostnih trendov je izvedena s pregledom aktualnih mednarodnih raziskav o trenutnem stanju informacijske varnosti. Prav tako je bil izveden pregled teorij, ki pojasnjujejo vpliv psiholoških dejavnikov na odločitvene procese. S sintezo ugotovitev smo izoblikovali predpostavke o vzrokih neracionalnih odločitev, teoretične pristope pa smo nadgradili z njihovo umestitvijo v organizacijsko in varnostno področje. Ugotovitve: Ugotavljamo, da organizacije funkcije informacijske varnosti ne razvijajo ustrezno. Pregled aktualnih raziskav je pokazal, da se organizacije pogosto neučinkovito odzivajo na povečana varnostna tveganja, saj jim to onemogočajo neugodne poslovne razmere, strokovna nepodkovanost in tradicionalna vodstvena mentaliteta, spremembe na področju varnostnih rešitev in kognitivne pristranskosti pri odločevalcih. Prav tako ugotavljamo, da je učinkovitost informacijske varnosti vse bolj pogojena z netehničnimi ukrepi, pri čemer največjo vlogo odigra usposobljen, dobro razvit in strateško naravnan varnostni management. Praktična uporabnost: Varnostni trendi, ki jih predstavljamo v prispevku, za večino sodobnih organizacij predstavljajo velik izziv pri doseganju poslovne uspešnosti. S prispevkom želimo opozoriti na sodobne varnostne dileme in prispevati k večji ozaveščenosti odgovornega managementa. Ponujamo tudi izhodiščne točke za učinkovito soočanje s kognitivnimi ovirami pri sprejemanju odločitev. Izvirnost/pomembnost prispevka: Prispevek je aktualen, saj analizira najnovejše raziskave o informacijski varnosti in na osnovi tega predstavlja sodobne trende. Prav tako je izviren, ker združuje spoznanja s področja psihologije tveganj in odločitev ter informacijske varnosti v organizacijski kontekst. Purpose: Information security is becoming an ever more important business process in this period characterised by uncertainty in the business environment. Its efficiency depends on various environmental, structural, and personal factors which need to be managed in order to adequately control all risks threatening organisations‘ survival. This paper analyses current security trends, as well as sociological and psychological obstacles in security management, with a view to clarifying different dilemmas related to the provision of information security. Design/Methods/Approach: The analysis of security trends was conducted on the basis of an overview of current international research on the present state of play in the field of information security. It also includes an overview of theories explaining the impact of psychological factors on decision-making processes. Assumptions regarding the reasons for irrational decisions were drawn by performing the synthesis of findings, while theoretical approaches were upgraded by placing them in the organisational and security fields. Findings: The authors find that organisations are not developing the function of information security in an adequate manner. The overview of current research shows that organisations are often inefficient in their response to higher security risks, since they are prevented from doing so by unfavourable business conditions, lack of expertise, traditional management mentality, changes in the field of security- related solutions and cognitive bias found in decision-makers. The authors also find that the efficiency of information security is ever more dependent on non- technical measures, whereby trained, well-developed and strategically-oriented security management plays a crucial role. Practical Implications: For the majority of modern organisations, security trends presented in this paper represent a great challenge in terms of achieving business success. This paper wishes to draw attention to contemporary security-related dilemmas and raise the awareness of responsible management. The paper also provides several starting points enabling an efficient confrontation with cognitive obstacles in the course of decision-making. Originality/Value: This paper is up-to-date, as it analyses the latest research into information security and uses such analysis to present contemporary trends. It is also original, since it combines findings from the fields of the psychology of risk and decision- making, as well as from information security, and places them in organisational context.

Purpose: The main objective is to present the symbiosis between smart cities, policing, criminal investigation and criminal intelligence. Moreover, another purpose is to critically address the underlying privacy concerns arising from smart city designs. Design/Methods/Approach: The paper is theoretical in scope and utilises a literature review as the basic method. Correlations between smart cities, policing and criminal investigations are identified by analysing the applicability of core smart city technologies and services [SCTS]. Findings: It is evident that SCTS can influence policing styles and police effectiveness. SCTS hold great potential for criminal investigations and criminal intelligence as they provide information upon which police can develop investigations or crime-control strategies. Vice-versa, criminal investigations and criminal intelligence can provide guidelines for SCTS developers and the governance of smart cities. However, privacy concerns and the slowly developing regulatory framework remain the biggest issues when it comes to SCTS adoption, thus making measures to safeguard privacy a key factor for the legitimacy of smart cities and smart policing. Practical Implications: The paper introduces practical knowledge about the implications of smart cities for policing and crime investigation. Some research ideas are presented as well as suggestions for legislators, developers and others whose work area falls in the scope of (smart) city governance. Originality/Value: A comprehensive study of the symbiosis between smart cities and policing must not only consider the potential of SCTS but the related need to develop regulation and skillsets of human resources. Only a handful of papers address the connectivity of smart cities, criminal investigations and criminal intelligence from such a multidisciplinary scope. Therefore, the paper represents a contribution to works discussing these concepts. Namen prispevka: Namen prispevka je predstaviti simbiozo med pametnimi mesti, policijsko dejavnostjo, kriminalističnim preiskovanjem in kriminalističnoobveščevalno dejavnostjo. V tem kontekstu je podan tudi kritični razmislek o izzivih in dilemah, povezanih z varstvom zasebnosti. Metode: Prispevek je teoretične narave in temelji na pregledu literature. Korelacije med temeljnimi pojmi (pametna mesta, policijska in kriminalistična dejavnost) smo identificirali z analizo temeljnih tehnologij, sistemov in storitev, ki podpirajo delovanje pametnih mest. Ugotovitve: Tehnologije pametnih mest omogočajo razvoj novih oblik policijskega dela in imajo potencial za izboljšanje policijske učinkovitosti. Funkcionalnost tehnologij je razvidna tudi na področju kriminalistične dejavnosti, ki lahko z obdelovanjem podatkov in njihovo uporabo bolje načrtuje kriminalistične preiskave in razvija strategije preprečevanja kriminalitete. Simbioza je opazna tudi z nasprotnega vidika – s podajanjem smernic lahko kriminalistična in policijska dejavnost pomagata upravljavcem pametnih mest in razvojnikom tehnologij ter rešitev. Glavni izziv predstavlja varovanje zasebnosti in osebnih podatkov prebivalcev, zato so mehanizmi za preprečevanje zlorab ključni faktor legitimnosti pametnih mest in policijske dejavnosti. Praktična uporabnost: V prispevku so predstavljena uporabna znanja glede potencialov pametnih mest za izvajanje policijske in kriminalistične dejavnosti, prav tako tudi predlogi za raziskovalce in oblikovalce politik, razvojnike in druge, ki delujejo na področju upravljanja (pametnih) mest. Izvirnost/pomembnost prispevka: Če želimo razumeti sistem dejavnikov, ki vplivajo na simbiozo med policijsko dejavnostjo in pametnimi mesti, je treba upoštevati ne samo potenciale različnih tehnologij in rešitev, temveč tudi potrebe in dileme, ki se pojavijo sočasno s tehnološkim razvojem, primarno na področju razvoja kadrovskih kompetenc in prilagoditve normativnih okvirjev. Pregled literature pokaže, da obstajajo redke znanstvene objave, ki multidimenzionalno proučujejo simbiozo pametnih mest in policijske dejavnosti. Prispevek zato dopolnjuje obstoječa dela in znanja na tem področju.

Namen prispevka: Namen prispevka je analizirati vedenjske vzorce uporabnikov in varnostna tveganja, ki se pojavljajo pri uporabi spletnega bančništva. V prispevku so predstavljeni temeljni in aplikativni teoretični okvirji ter modeli pojasnjevanja vedenja uporabnikov spletnega bančništva, na podlagi rezultatov empirične raziskave pa so izoblikovani predlogi za izboljšanje programov informiranja in ozaveščanja uporabnikov za varno uporabo spletnega bančništva. Metode: Izhajajoč iz okvirov vedenjskih teorij in usmeritev bank za varno uporabo spletnega bančništva je bila izvedena raziskava med uporabniki v Sloveniji (n = 210). Zbiranje podatkov je potekalo s pomočjo spletnega anketiranja. Proučili smo, kako uporabniki ob rabi spletnega bančništva skrbijo za varnost lastnih elektronskih naprav, gesel, digitalnih potrdil in na kakšen način skrbijo za varnost na spletu ter katere druge samozaščitne ukrepe pri tem uporabljajo. Ugotovitve: Rezultati kažejo, da so anketiranci dobro ozaveščeni o nevarnostih pri uporabi spletnega bančništva, vendar kljub temu še vedno zaznavamo neprimerne prakse pri zaščiti ključnih podatkov. Ugotavljamo tudi nizko stopnjo samoiniciativnosti pri uporabi varnostnih ukrepov, zato je zavzetost uporabnikov ključni izziv, ki ga je treba nasloviti za dvig stopnje varnosti pri uporabi spletnega bančništva. Omejitve raziskave Omejitve raziskave izhajajo iz majhnega vzorca udeležencev raziskave, vsebinsko pa je raziskava osredinjena na proučevanje vedenja uporabnikov spletnega bančništva in ukrepov, vezanih na tovrstno storitev. Drugi vidiki zagotavljanja varnosti in vedenja uporabnikov pri rabi spleta in interneta v prispevku niso analizirani. Praktična uporabnost: Ugotovitve raziskave so uporabne tako za ponudnike spletnega bančništva, njihove uporabnike kot tudi za vse zainteresirane in tiste, ki se ukvarjajo s procesi krepitve varne uporabe informacijske tehnologije. Izvirnost/pomembnost prispevka: Študija analizira vedenje uporabnikov spletnega bančništva s pomočjo različnih vedenjskih teorij, ki so bile osnova za oblikovanje vprašalnika, uporabljenega v raziskavi. Uporabljena metoda lahko predstavlja osnovo za bodoče raziskovanje vedenja uporabnikov tako na področju spletnega bančništva kot drugih spletnih storitev. Purpose: The purpose of the paper is to analyse behavioural patterns of users and the security risks that occur when using online banking. The paper presents basic and applied theoretical frameworks and models for explaining the behaviour of online banking users. Based on the results of the empirical research, proposals for improving the awareness programs for users regarding security of online banking were developed. Design/Methods/Approach: Based on frameworks of behavioural theories and guidelines for the safe use of online banking, a survey was conducted among users in Slovenia (n = 210). Data were collected through online survey. We analysed how users take care of their safety and security when using online banking services, how they protect their electronic devices, passwords, digital certificates and what other self-protection measures they use. Findings: The results show that respondents are well aware of the dangers associated with online banking, but nonetheless they still engage in risk-taking and fail to protect their key data properly. We also observe low level of self-initiative and commitment for the use of additional security measures. Therefore, user engagement is a key challenge that needs to be addressed in order to raise the level of online banking security. Research Limitations: The limitations of the research derive from a small sample and the limited focus of the survey. The research is focused on studying the behaviour of online banking users and measures related to such services. Other aspects of information security and users behaviour when using the internet and online services are not analysed in the paper. Practical Implications: The paper and research findings are useful for both online banking providers and their users, as well as for those who are in any way interested in the topic or involved in the process of reinforcing the safe use of information technology. Originality/Value: The study analyses the behaviour of online banking users through various behavioural theories and models, which formed the basis for the questionnaire used in the survey. The method presented in the paper can serve as a basis for future exploration of user behaviour both in the area of online banking and in other online services.

Purpose: The paper presents the results of two research studies analysing the views of different target populations on cyclist safety and the adequacy of preventive measures in Slovenia. The purpose of both research studies was to identify the shortcomings of different approaches to ensuring cyclist safety, evaluate the adequacy of planned solutions and propose some improvements of preventive actions taken by various stakeholders. Design/Methods/Approach: A field survey was conducted among the residents of the City Municipality of Celje (n = 171) on their satisfaction with cyclist safety, while an online survey was carried out among internet users (n = 210) on the usefulness of an alternative approach to raise cyclists’ awareness by digitising cycling routes and safety risks. Findings: Results show that respondents are generally not satisfied with cyclist safety, as most believe that municipal efforts are insufficient to ensure it. It was observed that cycling infrastructure needs to be properly regulated and that a positive traffic culture should be promoted at the municipal level, including through the promotion of preventive activities. Both internet users and local residents recognise a strong need to digitise cycle paths by indicating safety risks. Therefore, it would be reasonable to upgrade conventional approaches to raising public awareness by introducing solutions that are useful for cyclists. Research Limitations / Implications: The limitation of the research study arises from the fact that its results cannot be generalised to all municipalities, since they apply different approaches to ensuring cyclist safety due to their autonomy and are facing different safety risks. Moreover, due to the use of a non-random sample, caution is necessary when generalising research results. Practical Implications: The results of the presented studies are primarily useful to decision-makers and infrastructure managers at national and local level when planning changes and safety measures in the field of cyclist safety. Originality/Value: The paper encompasses two studies, the findings of which complement one another substantially and provide a deeper insight into the issues of cyclist safety and preventive actions taken by different stakeholders. They serve as a basis for further exploring this issue in different local environments with a view of obtaining a more comprehensive insight into the key challenges of traffic safety from a broader perspective. Namen prispevka: V prispevku predstavljamo rezultate raziskav, s katerima smo analizirali stališča različnih ciljnih populacij o kolesarski varnosti in primernosti preventivnih ukrepov v Sloveniji. Namen raziskav je ugotoviti pomanjkljivosti v pristopih k zagotavljanju varnosti kolesarjev, oceniti primernost načrtovanih rešitev in predlagati izboljšave na področju preventivnega ukrepanja različnih deležnikov. Metode: V okviru prispevka smo izvedli terensko raziskavo med prebivalci Mestne občine Celje (n = 171) o zadovoljstvu z urejenostjo kolesarske varnosti in spletno anketo med uporabniki spleta (n = 210) o uporabnosti alternativnega pristopa k ozaveščanju kolesarjev skozi digitalizacijo kolesarskih poti in varnostnih tveganjih. Ugotovitve: Rezultati kažejo, da anketiranci na splošno niso zadovoljni z varnostjo kolesarjev, saj večina meni, da občina za varnost kolesarjev ne naredi dovolj. Ugotavljamo, da je na ravni občine treba zagotoviti ustrezno urejenost kolesarske infrastrukture in spodbujati kulturo udeležencev v cestnem prometu, tudi skozi spodbujanje preventivnega ukrepanja. Uporabniki spleta kot tudi prebivalci Mestne občine Celje prepoznavajo visoko potrebo po digitalizaciji kolesarskih poti z označbo varnostnih tveganj, zato je smiselno klasične pristope k ozaveščanju javnosti nadgraditi z rešitvami, ki so uporabne za kolesarje. Omejitve/uporabnost raziskave Omejitev raziskave je v tem, da je ne gre posplošiti na vse občine, saj občine zaradi svoje suverenosti različno pristopajo k zagotavljanju varnosti kolesarjev, prav tako pa se v vsaki občini pojavljajo različna varnostna tveganja. Obenem je zaradi neslučajnostnega vzorca potrebna previdnost tudi pri posploševanju rezultatov raziskave. Praktična uporabnost: Rezultati prispevka so primarno uporabni za odločevalce in upravljavce na državni ravni ter lokalni ravni pri načrtovanju sprememb in varnostnih ukrepov na področju varnosti kolesarjev. Izvirnost/pomembnost prispevka: Prispevek vključuje raziskavi, katerih ugotovitve se pomembno dopolnjujejo in omogočajo globlji vpogled v problematiko varnosti kolesarjev ter preventivnega ukrepanja različnih deležnikov. Prispevek predstavlja podlago za nadaljnje raziskovanje tovrstne problematike v različnih lokalnih okoljih za pridobitev celovitejšega vpogleda v ključne izzive prometne varnosti na širši ravni.

Purpose: The paper presents approaches and strategies to preventing radicalisation in Croatia, police officers training, together with a study among police officers on preventing and deterring radicalisation in Croatia. The purpose of the paper is to present the context and the state-of-the-knowledge on preventing radicalisation, and moreover to analyse the approaches, police officers perceptions and training models on a national level. Design/Methods/Approach: A study among 108 of students of the Police College, Ministry of the Interior of the Republic of Croatia, was conducted. The purpose was to analyse police officers’ perceptions of the state of radicalisation in Croatia and effectiveness of multi-stakeholder and cross-sectoral approach to preventing radicalisation and violent extremism in Croatia. Another study aim was to evaluate whether, using a proposed training design, it is possible to strengthen the notion of institutional interdependence in police officers’ efforts in the area of facilitating and supporting disengagement from radicalisation. A questionnaire developed in the First Line project dedicated to the training of various stakeholders in preventing radicalisation was used before and after the training. Findings: The findings of our study on preventing and deterring radicalisation in Croatia show that the tackling and prevention of violent extremism and terrorism is largely seen as being top-down-oriented by the respondents, driven by the nation state and the main task of security sector agencies, namely the government, intelligence services and specialised police units. It is also important to mention that the police officers did not underestimated their own role and accountability at the local level for preventing radicalisation. Originality/Value: Education and training in the area of preventing radicalisation is necessary for efficient collaboration between stakeholders. The study analysed the influence of proposed training model on practitioners’ perceptions. While the participants in the study still mainly emphasize the role of security agencies, we established that appropriate training can strengthen the awareness of the interdependence of the various stakeholders engaged in these efforts. The study results are useful for police management to further strengthen the transfer of prevention strategies to local level and develop training models for various stakeholders. Namen prispevka: Prispevek predstavlja pristope in strategije naslavljanja radikalizacije ter opisuje vsebino usposabljanja s področja preprečevanja radikalizacije policistov na Hrvaškem. Osrednji del prispevka predstavlja raziskava o stališčih policistov glede preprečevanja in odvračanja od radikalizacije na Hrvaškem. Namen prispevka je predstaviti aktualna znanja in pristope k preprečevanju radikalizacije ter analizirati nacionalne strategije, modele usposabljanja in stališča policistov o učinkovitosti pristopov. Metode: Raziskava je bila izvedena na vzorcu 108 študentov (policistov) Visoke policijske šole Ministrstva za notranje zadeve Republike Hrvaške, s ciljem oceniti stališča policistov o stanju radikalizacije na Hrvaškem in učinkovitosti večdeležniškega ter medsektorskega pristopa k preprečevanju radikalizacije in nasilnega ekstremizma. Z raziskavo so avtorji ugotavljali tudi, ali je s pomočjo razvitega modela za usposabljanje policistov mogoče okrepiti njihovo zaznavo medinstitucionalne soodvisnosti pri izvajanju policijskega dela na področju preprečevanja radikalizacije. Ugotovitve: Rezultati raziskave kažejo, da se po mnenju anketirancev pri preprečevanju radikalizacije na Hrvaškem spodbujajo in uporabljajo od zgoraj-navzdol usmerjeni pristopi, ki jih spodbuja država, med glavne deležnike pa umeščajo vlado in državne varnostne organizacije, še posebej obveščevalne službe in specializirane policijske enote. Na podlagi rezultatov so avtorji prispevka ugotovili, da policisti ne podcenjujejo svojega vpliva in dobro razumejo svojo vlogo pri preprečevanju radikalizacije na lokalni ravni. Izvirnost/pomembnost prispevka: Izobraževanje in usposabljanje s področja preprečevanja radikalizacije je pomemben ukrep za vzpostavljanje učinkovitega sodelovanja med različnimi deležniki. V raziskavi so avtorji analizirali tudi vpliv izdelanega modela usposabljanja na stališča policistov in ugotovili, da lahko z ustreznim usposabljanjem okrepimo njihovo razumevanje in ozaveščenost o soodvisnosti med deležniki. Rezultati raziskave so uporabni predvsem za policijski management pri nadaljnjem razvoju preventivnih strategij in modelov usposabljanj za različne deležnike ter njihovem prenosu na lokalno raven.

Namen prispevka: Namen prispevka je analizirati dovzetnost in ranljivost zapornikov, oseb v probaciji in prosilcev za mednarodno zaščito za radikalizacijo, ki vodi v nasilni ekstremizem. Proučiti želimo izkušnje iz slovenske prakse in na tej podlagi identificirati indikatorje, ki bi lahko služili za zgodnjo detekcijo tveganj za radikalizacijo pri analiziranih skupinah. Metode: Indikatorji za analizo tveganj, povezanih z radikalizacijo, so bili identificirani v večdelni raziskavi, ki je obsegala pregled literature in primerov iz praks, terensko anketiranje med policisti, ki se ukvarjajo s preiskovanjem ter preprečevanjem radikalizacije, ter fokusno skupino, v katero so bili vključeni strokovnjaki s področja izvrševanja kazenskih sankcij. Ugotovitve: Rezultati raziskave so pokazali, da je ranljivost in dovzetnost za radikalizacijo, ki vodi v nasilni ekstremizem, mogoče prepoznati na podlagi zunanjih in notranjih indikatorjev, povezanih z vedenjem, socializacijo in osebnimi prepričanji, ob upoštevanju kontekstualnih okoliščin analiziranih populacij. Kljub prepoznavanju potencialnih tveganj za radikalizacijo zapornikov, oseb v probaciji in prosilcev za mednarodno zaščito med ključnimi deležniki, ki se ukvarjajo s problematiko radikalizacije, je pojavnost radikalizacije med analiziranimi skupinami v Sloveniji zaenkrat relativno redka. Omejitve/uporabnost raziskave Zaradi omejenega števila strokovnjakov, ki se v Sloveniji ukvarjajo s preprečevanjem in preiskovanjem radikalizacije, sta bili empirični raziskavi opravljeni na manjšem vzorcu izpraševancev. Rezultati, ki dajejo vpogled v trenutno stanje radikalizacije med različnimi ranljivimi skupinami v Sloveniji, so uporabni za strateško in operativno raven varnostnih strokovnjakov, tako pri načrtovanju kot izvajanju programov preprečevanja radikalizacije, odvračanja od radikalizacije ter deradikalizacije. Izvirnost/pomembnost prispevka: Prispevek z večdelno raziskavo, ki vključuje kombinacijo različnih raziskovalnih metod, prikazuje izkušnje iz prakse in daje vpogled v trenutno stanje na področju radikalizacije med zaporniki, osebami v probaciji in prosilci za mednarodno zaščito. Gre za prvo raziskavo v Sloveniji, ki proučuje dovzetnost specifičnih ranljivih skupin. Nabor predstavljenih indikatorjev za prepoznavanje tveganj za radikalizacijo pa je uporaben za razvoj nacionalnih in lokalnih strategij v prihodnje.

The literature review indicates that there are different root causes underlying the radicalisation process. While radicalisation is primarily an individual process, also group dynamics and identity are often referred to in the literature as well as macro-level factors such as the effects of globalisation and modernization. Radicalisation and violent extremism present a security threat to the Central Europe and Western Balkan countries. In the past few decades, the Western Balkan countries have been viewed as a breeding ground for religious radicals and violent extremism. Nowadays, the police have assumed a crucial role in facilitating a preventive multi- stakeholder approach at the local or regional level, particularly in at-risk local settings. The paper presents findings of a study conducted on a sample of 117 students of the Croatian Police College of the Ministry of the Interior and 57 Slovenian police officers. The purpose of this paper is to compare Croatian and Slovenian police officers’ perception of the impact of various factors on development of radicalisation and extremism.

Contemporary policies and initiatives aimed at addressing radicalisation and violent extremism aim to facilitate a systematic multi-stakeholder approach that encompasses the incorporation of civil society organisations. Despite the general recognition of various roles and potentials of non-state actors in the area of prevention and de-radicalisation, in practice, many challenges and knowledge-gaps are leading to a situation where civil society still represents an underused resource. This paper presents the potentials and capabilities of civil society and community organisations in countering violent extremism and radicalisation. Through an extensive literature review, we investigated good practices in joint collaborations, as well as practical limitations hindering the establishment of a whole-of-society approach. The central aim of this paper is to provide a clear picture of the current gaps and highlight conditions that need to be addressed in the future to facilitate a comprehensive and coordinated approach to countering violent extremism and radicalisation., Aktualne politike i inicijative usmjerene na suzbijanje radikalizacije i nasilnog ekstremizma potiču sustavan međuresorni pristup koji uključuje i organizacije civilnoga društva. Unatoč generalnom prepoznavanju različitih uloga i potencijala civilnog društva u području prevencije i deradikalizacije, u praksi je ipak puno izazova i neznanja što dovodi do toga da civilno društvo ostaje neiskorišteni resurs. U ovome radu prezentiramo potencijale i sposobnosti civilnog društva i njegovih organizacija i zajednica u suzbijanju nasilnog ekstremizma i radikalizacije. Kroz ekstenzivni pregled literature istražujemo dobre prakse u kolaboracijama, kao i ograničenja koja ometaju razvoj holističkog pristupa i angažmana cijelog društva u suzbijanju nasilnog ekstremizma i radikalizacije. Glavni je cilj ovoga rada pružiti jasnu sliku aktualnih propusta i uputiti na probleme koji se moraju rješavati kako bi u perspektivi bilo moguće postići sveobuhvatan i koordiniran pristup u suzbijanju nasilnog ekstremizma i radikalizacije.

In recent years experts and practitioners alike have been taking note of the emergence of security challenges arising from radicalisation, often leading to extreme violence. For effective prevention, the problems of radicalization and extremism must be understood as involving an intertwinement of several core elements, the combination of which creates a virtually endless number of possibilities for an individual’s radicalisation. Prevention programmes must address diverse contributing factors, including different actors such as governmental policy- makers and an array of practitioners (police organisations, intelligence agencies, health care personnel, social services agencies, schools, etc.) and consider the social and cultural characteristic of local environments. Police forces are a crucial actor in facilitating a preventive approach at the local or regional level. Furthermore, the police are also the leading agent for promoting a preventive multi- agency approach and maintaining cooperation between different stakeholders. This is particularly the case in local environments, where the police have a vast and strong network of contacts. With a purpose of evaluating the effectiveness of different institutions directly involved in preventing radicalisation leading to extremism we present preliminary findings of a study conducted on a sample of 117 students of the Croatian Police College of the MoI on the role of different stakeholders (e.g. police, NGO, local governments representatives) responsible for dealing with disengagement from radical and extremist behaviour in Croatia. The data were collected during the students’ study courses in December 2018. The respondents evaluated the effectiveness of different institutions involved in preventing radicalisation and extremism.

Managing (de)radicalisation processes has recently become an important task, which the police are primarily involved in. In order to be successful in planning activities, it is very important to understand how participants who encounter these phenomena perceive this content and how they assess the situation. The particular aim of the study was to analyse the effectiveness of training in the prevention of radicalization and extreme violence in Croatia. The analysis is based on a study involving 117 students of the Croatian Police College of the MoI. The data were collected during the students’ study courses in December 2018. A questionnaire was used to analyse participants' opinion on factors that influence the development of radicalization and violent extremism on an individual in Croatia. Participants of the study were interviewed at the beginning and after the end of the training to determine the influence of such training on their knowledge on extremism, violent extremism and the process of radicalization. Authors analysed whether after the training both the level of knowledge and the opinion of participants on conditions or factors affect the development of extremism and strengthening the radicalisation of an individual changed. The aim of a study was also to evaluate whether it is possible to strengthen the competencies of professionals in the field of analysis, using the respective training design.

Radicalisation and extremism, with the potential to lead to violent extremism, are a constant security threat in modern democratic societies. In the last few decades, Europe generally and the Western Balkan countries in particular have been broadly viewed as a breeding ground for religious radicals and violent extremis It is becoming clear that radicalisation-prevention strategies must be locally oriented and harmonised at the international and interagency levels. It is intelligence agencies that deal with violent extremism since they are leading national security actors and operate using classified information. Nowadays, the police and other local stakeholders like local government, schools and NGOs are crucial for facilitating a preventative multi-agency approach, especially in local settings. Such an approach should combine measures from the area of criminal justice with policies from the fields of education, social inclusion and integration, while ensuring the timely provision of effective de-radicalisation and/or disengagement. The authors of this paper understand the term disengagement as the action or process of withdrawing from being involved in a radical activity, situation or group. It differs from counter-radicalisation (preventing radicalisation from taking place) and de- radicalisation (bringing about a change in values and ideas away from radical and/or violent ideas). The paper presents the preliminary findings of a study conducted on a sample of 108 students at the Croatian Police College of the MoI concerning the role of different stakeholders responsible for efforts towards the disengagement of individuals from radical and extremist movements in Croatia. The data were collected during the students’ study courses in December 2018.

Purpose: Authors analyse the quality of policing in two different municipalities, divided by a national border between Slovenia and Croatia. The survey in the Lendava municipality (in the eastern Pomurje region of Slovenia) was conducted on subsamples that consist of members of Roma, and non-Roma (Hungarian, Croatian and Slovenian) communities. The survey in the Čakovec municipality was performed on two subsamples of Roma and Croatian community members. The aim of the study was to analyse the quality of policing in multi-ethnic communities from four perspectives: (1) quality of police contact ; (2) perception of level of crime and disorder ; (3) fear of victimization, and (4) level of community cohesion. Methods: Data required for the survey was collected on the basis of questionnaire for the evaluation of community policing called „The Community Policing Evaluation Survey“ by Adam J. McKee (2001). The survey method was adopted for Slovenia and Croatia environment. First, we calculated the basic statistical parameters and then set out indicators of questionnaire reliability. The differences in the perception of the quality of community policing were calculated with univariate analysis of variance (ANOVA) and post hoc analysis with Dunnett's T3 test. Findings: Results for Slovenian subsample show that the implementation of community policing was slightly above average, whereas statistically significant differences between the Roma and non- Roma population regarding community cohesion and perception of crime and disorder were discovered. In Slovenian subsample respondents from the Roma community perceive disorder and crime in their environment less frequently, but they are also less integrated into the community they live, when comparing to non-Roma respondents. Although the results for Croatian subsample show a high- level of relationship quality between local police and the Roma population, we can still recognize some general opportunities to improve policing in the community relative to the majority population in both countries. Research limitations: A comparative aspect of this research can be useful since it was carried out in two very similar, but still different countries. On the one hand the police state of mind and approach to policing is different between the selected countries, which on the other hand makes it interesting to observe the final outcome regarding people’s perception. Limitations of this study are also seen in a small sample of respondents and the fact that the evaluations were performed only in specific geographical area. Originality: Though much research in both of the observed countries has sought to examine the effects of community policing, little research has examined the effects of community policing in multicultural communities, especially from the minorities (e.g. Roma) point of view.

Organizations should measure their information security performance if they wish to take the right decisions and develop it in line with their security needs. Since the measurement of information security is generally underdeveloped in practice and many organizations find the existing recommendations too complex, the paper presents a solution in the form of a 10 by 10 information security performance measurement model. The model—ISP 10×10M is composed of ten critical success factors, 100 key performance indicators and 6 performance levels. Its content was devised on the basis of findings presented in the current research studies and standards, while its structure results from an empirical research conducted among information security professionals from Slovenia. Results of the study show that a high level of information security performance is mostly dependent on measures aimed at managing information risks, employees and information sources, while formal and environmental factors have a lesser impact. Experts believe that information security should evolve systematically, where it’s recommended that beginning steps include technical, logical and physical security controls, while advanced activities should relate predominantly strategic management activities. By applying the proposed model, organizations are able to determine the actual level of information security performance based on the weighted indexing technique. In this manner they identify the measures they ought to develop in order to improve the current situation. The ISP 10×10M is a useful tool for conducting internal system evaluations and decision-making. It may also be applied to a larger sample of organizations in order to determine the general state-of-play for research purposes.

Informatizacija poslovnih procesov spreminja koncepte zagotavljanja organizacijske varnosti. V doktorski disertaciji pojasnimo, kako v sodobnem poslovnem svetu pristopiti k upravljanju informacijske varnosti, kakšen je njen vpliv na poslovni uspeh in kako presoditi njeno zrelost. V situaciji, ko se evolucija informacijskih groženj odvija ob boku težkih gospodarskih razmer, je namreč veliko organizacij nesposobnih obvladovanja informacijskih tveganj in hkrati slediti tehnološkim trendom. Ugotovitve doktorske disertacije predstavljajo pristop k zagotavljanju tega ravnovesja, uporabne pa so za lastnike podjetij, managerje, strokovni kader in ostalo zainteresirano javnost. Ugotavljamo, da je upravljanje informacijske varnosti omejeno predvsem zaradi slabe informacijske podpore pri načrtovanju. Tiste organizacije, ki ne ugotavljajo izhodiščne situacije in presojajo uspešnosti ter učinkovitosti varnosti, ne morejo doseči skladnosti med operativnimi ukrepi, varnostnimi potrebami ter organizacijsko strategijo. V ospredje razprave zato postavljamo presojanje kakovosti informacijske varnosti. To področje proučujemo skozi prizmo poslovne funkcije, izhodišče pa predstavljajo priporočila iz področja varovanja informacijskih tehnologij, sledijo teorije sistemov, preprečevanja groženj/kriminalitete, managementa ter organizacije. Glavni rezultat je interdisciplinarni model ocenjevanja informacijsko varnostne kompetentnosti organizacij. V procesu razvijanja celovitega pristopa k presoji stanja informacijske varnosti, smo identificirali ukrepe, ki v stroki veljajo za uspešne in učinkovite. Z raziskavo izvedeno med strokovnjaki v Sloveniji, smo analizirali veljavnost izbranih ukrepov in njihov vpliv na kakovost informacijske varnosti. Glede na priporočila je v začetnih fazah treba najprej poskrbeti za represivno-nadzorne in logične kontrole, v nadaljevanju pa za strateške, socialne, organizacijske, normativne in okoljske vidike. Rezultat raziskave je odločitveno orodje, sestavljeno iz desetih faktorjev in 100 unikatno uteženih indikatorjev merjenja. Z uporabo modela se organizacije razvrstijo v enega izmed šestih razredov učinkovitosti, kjer so podana priporočila za izboljšanje stanja. Z namenom evalvacije uporabnosti predlagane rešitve smo z dodatno raziskavo model praktično testirali. Implementirali smo ga v majhen vzorec srednje-velikih organizacij in ugotovili, da je v teh organizacijah informacijska varnost v začetnih razvojnih fazah. Z izjemo fizičnih, tehničnih in logičnih kontrol, so najvplivnejši kriteriji najmanj razviti, izmed vseh področij pa se največje težave kažejo pri izvajanju analiz informacijskih tveganj. Ob upoštevanju tehnološkega konteksta organizacij, s katerim smo normirali indeksirane rezultate, se je pokazalo, da 25 % organizacij skrbi samo za osnovne vidike, 40 % sodi v srednji nivo, 35 % pa lahko ocenimo kot dobre prakse. Glede na razvitost ukrepov je 60 % proučevanih organizacij v reaktivni drži, generalno pa večina razvija približno polovico ukrepov v modelu. S primerjavo enot smo ugotovili, kateri faktorji ločujejo učinkovite organizacije od neučinkovitih, z analizo korelacij pa razvili priporočila za nadaljnje ukrepe. Evalvacija je pokazala tudi, da je model uporaben za sprejemanje odločitev pri internih evalvacijah – študije primerov ali analize splošnega stanja na večjih vzorcih. In the course of this thesis, we aim to resolve three questions: how to approach information security management effectively and efficiently what is the impact of this security function on overall business success and how to prove security maturity through performance measurements. In today’s corporate world, many organisations are challenged by their inability to successfully manage information security risks while trying to keep up with the trends of technological development. The findings of this doctoral dissertation deliver an answer that is intended for those who are interested in how to systematically advance information security in a manner that contributes to functional balance. We hypothesise and prove that information security management currently lacks proper information support. Organisations that are not capable to perform analytics of security performance, cannot achieve compliance between the operational measures, security needs, and organisational strategy. Since the area has been studied through the lens of business functions, the starting points for developing a solution were based on the recommendations of IT professionals, followed by the system, threat prevention, and organisational theories. Observations made within security literature and research, legislation, and standards suggest that there are ten key areas that should be addressed when trying to manage the information security risks. We identified numerous preventive and reactive technical and management oriented security measures that should be incorporated to a security system. In the scope of initial research conducted among security experts, we analysed the validity and significance of those security measures for information security performance. The obtained data made it possible to weigh the variables in terms of their impact. The final outcome is a decision-making tool (10×10 information security performance model) which consists of ten critical success factors and 100 unique, weighted key performance indicators. In applying this model, the organisation is categorised through six levels of maturity that determine which measures should be developed for improvement. We also aimed to validate the utility of the proposed approach, so the second research applied the 10×10 model to a small sample of organisations. We learned that information security in those organisations remains in its initial development stages. With the exception of physical, technical and logical controls, the most influential criteria are the least developed. In fact, the biggest problems are reflected in the management and analysis of information risks. These controls include a variety of approaches to measurement of information security, which confirms the significance of the study undertaken. Taking account of the technological context of the organisations, the graph of the situation shows that 25% of the units only catered to their most basic security needs, 40% made it to the intermediate level, and 35% were recognised as good practices. The results showed that most of these organisations develop only half of recommended security measures in the model. By benchmarking the organisations, we identified which factors separate efficient organisations from inefficient ones and by analysing correlations between factors, we developed recommendations for further development. The most important impact of this study is that the presented model makes an original contribution to social science as well as to the field of IT security. It reaches beyond the limitations of previous studies that merely focused on isolated information security dimensions which are, in fact, interconnected. The added value of this study is seen in the development process, as the model also considers the opinion of experts, while proving its practicality and validity. It is useful for decision-making in the context of internal evaluations or analyses of the overall situation in larger samples.