Analysis of the Problems of Industrial Enterprises Information Security Audit

Abstract

The article analyzes the statistics of cyber attacks on industrial enterprises in 2018. The relevance of the information security audit is determined by the increased dependence of the success of the enterprise’s activities on the corporate information protection system as a whole. In order to protect from such attacks risks in the future, management of enterprises needs to take measures to ensure information security of production. This article describes the basic principles, goals and objectives of the audit of enterprises information security. In particular, it describes the general approach to conducting of IT audit at an enterprise. It is prove the importance of correct analysis of the enterprise’s belonging to the objects of critical information. In the course of the experiment, a security audit was conducted of one of the industrial enterprises of our region. The main problems arising during the audit of information security are listed on the example of the enterprise “Machine-Building Plant”. The results of the information security audit were presented and deficiencies in the provision of information security were shown.