MODERN INFORMATION SECURITY ANALYSIS: INTEGRATION OF BEST PRACTICES AND TECHNOLOGIES INTO ADMINISTRATIVE AND LEGAL MEASURES

Abstract

The article is devoted to modern approaches to the analysis of information security and the search for the most effective practices and technologies for countering threats using administrative and legal measures. The article proposes an information security concept based on several advanced administrative and legal measures, which includes an examination of a number of threat response cycles and with a direct attack on the protected object. Given the high dynamics of modern information processes and the accompanying information threats, it is necessary to have such a complex of measures to counter threats, which would allow not only to respond to threats, but also to predict them. The author, referring to the approaches of the Nobel laureate in economics Daniel Kahneman, on the distribution of decisions into "fast" and "slow", suggests combining the response to attacks with the accumulation of information, for the subsequent identification of the most unprotected elements and predicting future attacks. In particular, the proposed process of responding to attacks, which consists of the following stages of administrative and legal measures: preparation; identification and analysis; localization, elimination of the threat; recovery of activity after an incident. Attention is focused on the need, after the expiration of this four-step algorithm, to consider the initial data for subsequent use in each appropriate period when repeating the cycle. Special attention is devoted to the importance of transmitting data on unlawful attacks to the information collection system, which requires careful planning and coordination between numerous operations and structures. Such a process usually occurs due to well-coordinated administrative and legal measures in organizations, regulated by corporate norms, based on current legislation. Keywords: information security, information threats, administrative and legal measures, forecasting information threats, information and analytical activities