Abstract

The most important result of the formation of the information society of the XXI century was the emergence of a global information space, which unfolded a fierce struggle for information excellence. As a result, in modern society, information security is a critical component of national, regional and international security. The information security system should be aimed at ensuring information security as a property and as a state, as well as to create secure conditions for the use of information resources as an activity. Information is increasingly being used as a threat to competitors, information systems, software. Conceptual and scientific-methodological foundations of information security are still in the process of develop-ment and research. However, there are already models of information security and protection of information systems that try to answer the question: how to reduce the risk of system failure, what types of attacks can be eliminated, what types of threats exist. That is why the development of an economically determined risk assessment model for the information security system of the enterprise is an important aspect for the organization of the enterprise. Imbalances and failures in the information system can cause significant economic damage. That is why the creation of an ideal system that is certainly able to withstand the full set of threats requires significant costs, so the formation of an economically viable system to minimize information security risks at the level of the business entity is extremely important. At the enterprise level, the first step towards the for-mation of information security should be the development of a conceptual scheme, the overall structure of the information security model, which should be based on other models related to the protection of tangible and intangible assets and reduce the likelihood of information. At the organizational and managerial level, after a deep analysis under the guidance of a per-son directly responsible for the information security of the organization, coordinating and controlling it, aware of business goals, risks and threats, taking into account the opinions of experts, mathematical and functional models are formed, the or-ganizational and corporate component of security is determined information system. Accordingly, the information security of an organization can be defined as the protection of information and supporting infrastructure from accidental or intentional impacts, natural or artificial, that could cause unacceptable damage.

Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call