The aim of the thesis is to apply the methodology of qualitative risk analysis according to ISO/EC/27005:2011 and to increase awareness of existing threats and impacts on information assets and to create possible security precautions to minimize identified threats in a particular company. The thesis is divided into five chapters. Introductory chapter explains the basic concepts of information security and risk management in the organization that are necessary for understanding of the principles and the importance of information security. The second chapter deals with the international standards aimed at information security and briefly describes ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27005. The following two chapters form a smooth transition from the theoretical to the practical part. The third chapter characterizes selected company and describes the current state of information security in the company. The fourth chapter forms the methodological apparatus of qualitative risk analysis, compiled in accordance with ISO/IEC 27005:2011. It also contains a list of relevant threats, to which an asset of the company is exposed. The last chapter is conducted to qualitative risk analysis, together with the draft of the precautions to minimize the risks. The practical section shows that by the implementing the proposed action the company will reduce existing risks to acceptable levels and will significantly improve the protection of information assets.

Wave energy as an industry is yet to emerge as a reliable energy technology. As of now, no wave energy device is said to be a commercial success. Survival in the harsh ocean environment, the low frequency of waves and the variability of wave resources are the basic challenges that a wave power concept or a developer has to overcome. In addition to these challenges, there are number of other barriers such as economic and regulatory risks which hinder the development. A number of concepts or devices have failed one after another, to be commercially successful. Many of the failures were due to economic reasons and others were due to technical or environmental factors. Mistakes or failures can be repeated if they are not shared within the industry. This thesis attempts to identify the barriers to wave energy concepts and to analyse them qualitatively.  Efforts have been taken to include the previous instances of failures and their causes so as to avoid them in future. The data was collected through literature review of published papers, reports, news articles and through a survey which was distributed among  experts in the industry and academia.  It can be seen that one barrier can trigger others and that they are interconnected. In the same way, solving one barrier can clear the others too. The risks faced by wave energy technologies are identified, analysed and some mitigation methods are discussed.

This thesis deals with the issue of Evaluation of Economic Efficiency and Risks of Projects of Roads in South-Moravian Region. The first part of the thesis is theoretical. In the introduction defines the life cycle of an investment project. The studies and documentation of project are described. Furthermore, the thesis deals with the methodological evaluation of the effectiveness of public projects. The practical part of the thesis is aimed on the processing of economic and risk analysis. The evaluated project is the reconstruction of road and the construction of a new bridge structure on the road II/374 between the village Bílovice nad Svitavou and the town Adamov. The eCBA application was used to evaluate efficiency. A qualitative risk analysis of the project is carried out at the end of this thesis.