PROTECTION OF INFORMATION RESOURCES OF SMALL ENTERPRISES, INCLUDING THE SUBSYSTEM FOR MANAGEMENT OF NON-TECHNICAL ASPECTS OF INFORMATION SECURITY

Abstract

Information is one of the key resources of a modern economic organization. Companies with access to up-to-date, unique, useful and reliable information can compete effectively with other economic entities in today’s turbulent economic environment. Information management takes place in the space of the information system. An increasing part of this system now constitutes the information system which has largely become the primary storage and processing environment for information resources.Information, regardless of the size of the enterprise, is exposed to similar threats and risks of loss or destruction. However, the size of an enterprise, through its material resources, its capabilities in hiring qualified staff, very often determines the range of possibilities to counter potential threats and minimize the potential risk of loss of intangible resources. In this paper, the author attempts to classify, identify the risk areas for small entities which generally have the least potential to implement effective, modern information security management processes. The empirical part presents the original design of a subsystem of the Information Security Management System supporting the processes of mitigating the risk of threats to intangible resources of small enterprises.