Information security policy in the organization

Abstract

This article discusses the problem of ensuring the information security of many organizations associated with the developed and current information security policies in these organizations. The relevance of the work is due to the presence of gaps, vulnerabilities and flaws in ensuring the security of information of the STS Logistics organization, which increases the risk of unauthorized access to the company's information resources and the disclosure of personal data of employees. The purpose of the work is to identify shortcomings in ensuring the security of information in the organization under consideration from the existing information security policy, by developing a threat model and analyzing the current information security policy. Based on the work done, identify threats that create prerequisites, the possibility of leakage of protected information and develop recommendations for improving the information security policy to eliminate them. The ongoing research consists in building a model of information security threats and in analyzing the information security policy that exists in a given organization.