The diploma thesis focuses on implementation and deployment of information security management system (ISMS) into healthcare organizations. Specifies what is required to include in this process and what not to forget. It includes a risk analysis of a branch of the selected company, and for it is written a safety guide. Safety guide provides advice and recommendations regarding security in terms of human resources, physical security, ICT security and other aspects that should be included in the ISMS deployment in healthcare organizations. The work also reflects the newly emerging law on cyber security. It is expected that the law will also address cyber security in healthcare.

The aim of the thesis is to analyse issues of risk management in a construction company, especially in the context of construction contracts implementation. The first part is devoted to applied terminology and interpretation of relevant terms, followed by a classification of risks from different perspectives, including the risks’ possible further sub classification. Furthermore, significant risk resources and construction participants who might be affected by the risks are presented. The third chapter deals with risk management; individual phases of this complex process are described herein, including their correct sequences, as well as a selection of methods and techniques that are standardly used in risk management. The last, fourth chapter summarises the problems of risk management on a practical example, where a construction company implements a construction contract by applying selected risk management methodologies.