Corporate Information Systems Research Articles

Cybersecurity Management: Developing Robust Strategies for Protecting Corporate Information Systems

This growing complexity and sophistication of cyber threats call for a sea change concerning how organizations handle cybersecurity. Traditional isolated, reactive security models no longer protect against evolving digital risk. This abstract provides an innovation-oriented comprehensive methodology for completely transforming the approach of organizations to the protection of their critical information assets. At the heart of the method lies a recognition of the fact that cybersecurity is not strictly a technological challenge but has multifaceted elements that have to be aligned with the overall business objectives operational constraints, and risk tolerance of the organization. One of the crucial innovations is the integration of advanced analytics, blockchain technology, and machine learning techniques that will enable any organization to create a much more accurate and proactive perspective related to its vulnerability to cyber threats. This holistic cybersecurity methodology can transform security posture, strengthen collaborative capabilities, and build a resilient cybersecurity ecosystem through effective implementation and validation. These insights and lessons learned will, no doubt, inspire and guide other organizations toward a more robust, adaptive, and collaborative approach to cybersecurity management as the organization continues to improve and further innovate in the field of best security practices.

Corporate Information System and Environmental Sustainability Dimension – The Associated Link Evaluation

Abstract The assessment of the link between the information system or the informational system, as some authors call it, refers to the information system, and the environmental dimension within the organization or, better said, environmental sustainability, which answers, through excellence, the question of how we propose to study this connection or interdependence between the information system and the environmental sustainability dimension. To proceed to an in-depth study of the link between the information system and a dimension of sustainability, we proposed to expand the search parameters to the following fields of reference in terms of sustainability: environmental sustainability along its component dimensions and information system along its component dimensions. By its purpose, the article tests a methodological framework developed to evaluate informational systems and environmental sustainability Соnsidеring thе novelty оf thе еnvirоnmеntal issuе, thе aсtiоn rеsеarсh apprоaсh соuld bе transfоrmеd intо a tооl tо hеlp prоvidе pоssiblе thеоrеtiсal and praсtiсal sоlutiоns fоr thе businеss еnvirоnmеnt in tеrms оf thе infоrmatiоn systеm.

Operation of a Corporate Information System for Project Activity Management in the Activities of an IT Enterprise

Operation of a Corporate Information System for Project Activity Management in the Activities of an IT Enterprise

COGNITIVE MODELING OF PROCESSES RELATED TO PERSONNEL MANAGEMENT IN AN ORGANIZATION

When managing organizations, it is necessary in many cases to implement personnel management procedures. The paper proposes to use the methodology of cognitive modeling. Then the most effective management decisions and scenarios for the development of events can be selected using the fact that concepts are distinguished that will characterize the current situation in a qualitative and quantitative way. In addition, estimates of the mutual influence of factors are considered. The method of cognitive modeling of the processes of managing the development of the organization's personnel is proposed. In the course of its implementation, cognitive maps are formed. A block diagram aimed at cognitive and simulation dynamic analysis and modeling is presented. The implementation of the development of strategies and forecasts of how the personnel of the organization will develop with the involvement of a cognitive approach is considered in the form of the presented analytical technology. Suggestions for an intelligent advising system are given. The functions that are designed to solve problems related to the development of the company's personnel are shown. In the results, based on the proposed approach, an illustration of the developed scheme of causal relationships in the analysis of violations of technological discipline is given. The results of the work can be useful in modeling and managing the work of personnel in corporate information systems.

TECHNOLOGICAL AND TACTICAL SUBSYSTEMS OF THE INTELLIGENT MANAGEMENT INFORMATION SYSTEM (ON THE EXAMPLE OF AN OIL AND GAS CORPORATION)

Providing Ukraine with its own oil and natural gas is one of the main tasks of the national economy. The possibility of development of the oil and gas industry is primarily determined by the volume of explored and mined resources. Since the existing explored reserves will not ensure the growth of oil and gas production, it is necessary to increase the amount of investments in the exploration and development of new deposits and hydrocarbon deposits with the aim of increasing their reserves and further growth of production, which requires the adoption of management decisions, which are characterized by increased technological and economic risk, uncertainty.
 Taking into account the main reasons for the decline in oil and gas production in Ukraine, the specifics of the industry and the requirements for information systems in the oil and gas industry, it can be argued that the use of intelligent technologies not only at the strategic, but also at the tactical and technological levels of management - is one of the keys to success in creating/reengineering, implementation and effective use of management decision support systems.
 The scientific and practical results presented in the article regarding the innovative configurations of architecture and design, proposed intellectual methodology for tactical and technological subsystems of the corporation management information systems. The above-proposed solutions - should be taken into account when reengineering corporate information systems not only in the oil and gas industry in Ukraine [1-3]. 
 Moreover, the obtained results are relevant and applicable not only for local companies, but also for international corporations on emerging markets in the context of global and regional macroeconomic and military crisis phenomena.

INTELLIGENCE ANALYTICAL SUBSYSTEM OF CORPORATE MANAGEMENT (ON THE EXAMPLE OF AN OIL & GAS COMPANY)

The changes that have taken place in the Ukrainian economy in recent years due to the consistent impact of global macroeconomic, epidemiological and military factors of the current deep crisis - actualized for enterprises and corporations a complex adaptive reorganization of their analytical subsystem of their management [1, 2].
 In addition, in order to be consistently effective in today's global business environment (liberalization of markets, their globalization, increased competition, decreasing consumer loyalty, constant variation in oil and gas prices, etc.), oil and gas companies must have an innovative data and knowledge environment that allows seamless and effective joint leveraging knowledge inside the corporation and across the value chain [3]. The application of knowledge-based decision support systems as an important tool of innovative management policy enables effective and sustainable management of a complex of integrated processes of an oil and gas production company (mitigating the impact of crisis factors) [4].
 The scientific and practical results presented in the article regarding the methodology and design of innovative analytical subsystem of the corporation management information systems should be taken into account when reengineering corporate information systems not only in the oil and gas industry in Ukraine [5-6]. 
 Moreover, the obtained results are relevant and applicable not only for local companies, but also for international corporations on emerging markets in the context of global and regional macroeconomic and edipemical crisis phenomena.

ТЯГОВЫЕ РАСЧЕТЫ С УЧЕТОМ ДОПОЛНИТЕЛЬНЫХ ДАННЫХ

The article discusses the technological aspects of automated adjustment of standard train schedules using software robots. The information environment and existing technology for main-taining standard freight train schedules are considered. Information is provided on the implemen-tation of robotic process automation in corporate information systems operated in traffic control directorates. The stages and results of automating the adjustment of standard train schedules using software robots are considered. A generalized diagram of the process of adjusting standard train schedules using a software robot and a special data converter is presented. A fragment of the robot code for uploading the standard schedule into the Elbrus hardware and software complex is given. The issues of using Python programming language libraries to automate processes are considered. An assessment was made of the effectiveness of using software robots to adjust standard sched-ules. The possibilities of joint robotic and intelligent automation for adjusting train schedules are considered.

ТЕХНОЛОГИЯ АВТОМАТИЗИРОВАННОЙ КОРРЕКТИРОВКИ НОРМАТИВНЫХ ГРАФИКОВ ДВИЖЕНИЯ ПОЕЗДОВ С ПРИМЕНЕНИЕМ ПРОГРАММНЫХ РОБОТОВ

The article discusses the technological aspects of automated adjustment of standard train schedules using software robots. The information environment and existing technology for main-taining standard freight train schedules are considered. Information is provided on the implemen-tation of robotic process automation in corporate information systems operated in traffic control directorates. The stages and results of automating the adjustment of standard train schedules using software robots are considered. A generalized diagram of the process of adjusting standard train schedules using a software robot and a special data converter is presented. A fragment of the robot code for uploading the standard schedule into the Elbrus hardware and software complex is given. The issues of using Python programming language libraries to automate processes are considered. An assessment was made of the effectiveness of using software robots to adjust standard sched-ules. The possibilities of joint robotic and intelligent automation for adjusting train schedules are considered.

Implementation of corporate social responsibility in the context of integration with the enterprise management information system

Purpose. To develop recommendations for the corporate digital responsibility (CDR) strategy aimed at increasing the level of integration of corporate social responsibility (CSR) and information systems (IS) of the company. To develop a mathematical model of coordination decisions regarding CSR with production and business activities of companies. Methodology. The introduction of the methods of: logical generalization made it possible to define CDR adapted to Ukrainian realities; analysis and synthesis – to point out the need to integrate CSR with IS; comparative analysis – to determine directions, tasks, requirements for the implementation of CDR; logical abstraction – to substantiate the need to implement strategy for CDR implementation, develop its stages, tasks and goals of each stages; mathematical analysis – to develop mathematical model of coordination of management decisions. Findings. A definition of CDR, adapted to Ukrainian reality, which became the conceptual basis of the presented research, is proposed. The need for integration of CSR and IS and the formation of a new mechanism – CDR, as a result of the evolution of CSR, is substantiated. The directions, tasks, and requirements for the implementation of CDR are defined. The need to implement the strategy for the implementation of CDR are substantiated, its stages, tasks and goals of each stage are developed. It is indicated that the integration of CSR and IS can take place iteratively, with management gaining experience and finding optimal methods and tools. Originality. A mathematical model that allows one not only to coordinate various management decisions, but also to forecast their short-term and long-term results, is developed. Practical value. The proposed approach to CDR strategy formation will increase the effectiveness of CDR and improve the integration of CSR and IS. The developed mathematical model will allow one not only to solve the problem of coordination of management decisions, but will also help to economically spend IT resources and speed up the delivery of results.

DESIGN OF INNOVATIVE MANAGEMENT INFORMATION SYSTEM (ON THE EXAMPLE OF AN OIL & GAS EXPLORATION COMPANY)

The changes that have taken place in the Ukrainian economy in recent years due to the consistent impact of global macroeconomic, epidemiological and regional military factors of the crisis - actualized for enterprises and corporations a complex reorganization of their management systems, an integral component of which are adaptive innovative information systems [1].
 On the basis of the above information, it is possible to draw a preliminary conclusion regarding the importance of such reengineering of the information system of an oil and gas company, the result of which will be an increase in the efficiency of managing the integral complex of business processes of an oil and gas company, which will lead to an increase in the production of own hydrocarbons in Ukraine, a decrease in their cost price, an improvement raw material base of the gas and oil industry [2, 3].
 The scientific and practical results presented in the article regarding the design of management information systems should be taken into account when reengineering corporate information systems not only in the oil and gas industry in Ukraine. Moreover, the obtained results are relevant and applicable not only for local companies, but also for international applications in the context of global, regional macroeconomic and current national crisis phenomena.

Analysis of the use of the BYOD concept in corporate information systems

The article discusses the issue of expanding the level of use of private terminal (terminal) programmable devices in corporate information systems and networks. It is noted that the main consumer of the "bring your own device" concept (BYOD concept) is the educational sphere, the sphere of services and the sphere of entertainment. As for the government sphere and the business sphere, the issue of spreading the BYOD concept is determined by the information that circulates in the corporate information systems and networks where it is used. And this, in turn, is related to the following security issues: leakage of company-sensitive information or state information with limited access through one's own mobile devices; penetration into the corporate information system and network. It is also stated that the spread of the BYOD concept is not so much of a technical nature as of a social-civilizational nature, since the frontmen of this concept are millennials - people who were born and grew up in the digital era and who cannot imagine their life without a private mobile device, and also have a completely different attitude to traditional approaches to learning and work. Ensuring a high level of cyber security when using the BYOD concept is possible if all issues of using private mobile devices in corporate information systems and networks are formalized and institutionalized. In addition, the concept of BYOD determines the need to establish certain restrictions, special software, the possibility of remote access and administration of private mobile devices, which in turn narrows its possibilities and reduces the boundaries of the use of the entire existing range of services, programs and content. Also, the implementation of the BYOD concept requires the readiness of the employees themselves to increase the level of self-control, self-discipline and allow remote access to their private mobile device, as well as restrictions.

Развитие системы менеджмента качества в проектах на фоне глобальных трансформаций

The article highlights the main provisions of building a quality management system in projects. The aim of the study is to build a model of the quality management process in projects in the form of Petri nets, as well as to develop the author’s system of criteria for assessing the quality of the project, adequate to global changes – the reversal of supply chains from West to East and the priority of the development of own production within the framework of the import substitution policy and ensuring Russia’s technological sovereignty. The research methods were formalization and modeling, which allow reflecting the logic of the links between the processes of implementing a quality management system in projects. National standards served as a conceptual basis. As a result, a logical-information model in IDEF0 notation was built, a discrete-event model based on Petri nets was developed and functionally described, including the main stages of quality management in projects, appli-cable in the conditions of automation of production and quality control of projects, processes, results. The mod-el can be integrated into corporate information systems as an additional module. A unique set of project quality assessment indicators covering aspects of import substitution, production localization, engineering staffing, digitalization, sustainable development in the context of project stages is proposed.

THE INTEGRATION OF HR INFORMATION SYSTEMS UTILIZATION IN INDUSTRIAL ENTERPRISES

Human resource management (HRM) is of strategic importance for the management of organizations, therefore management measures in the field of HRM are of considerable importance for the performance of any organization. For the management of HR in the organization, it is important to have an information system that provides timely and reliable information necessary for decision-making. The article is focused on human resource management information systems (HRIS), which represent a significant part of corporate information systems. The main aim of the paper is to present the results of the analysis of HRIS used in industrial enterprises in Slovakia. The results of the analysis showed, that most often HRIS are only partially interconnected with other corporate IS. The results also pointed out that the used HRIS are considered mostly as useful and also demonstrated that how users evaluate the usefulness of the used HRIS is related to how they assess the integration of these systems with other corporate information systems.

МЕТОДЫ ОБЕСПЕЧЕНИЯ БЕЗОПАСНОСТИ БАЗ ДАННЫХ

The article introduces the main trends in the development of databases that generate new threats regarding their availability, integrity and confidentiality. It provides an overview of literature sources. The article describes modern approaches to the tasks of ensuring the security of database operation. It also determines suitability database protection methods to the potential threats characteristic of them, shows the sources of these threats. Article containes example of corporate information and educational system of the East Kazakhstan University named after S. Amanzholov, where has been implemented such elements of the information security policy as basic security mechanisms (network filtering of information flows, installation of anti-virus software), role-based access control model, mandatory management of granting powers to authorized users, logging of user actions for ensuring the procedure of non-repudiation. At the end, has been formulated recommendations for the expanded use of the metadata mechanism and the improvement of authentication procedures.

Implementation of ESG principles at water supply enterprises in the context of digitalization

The basic principles of ESG (Environmental, Social, and Corporate Governance) have achieved wide popularity throughout the world and, to a certain extent, have found their way into the conditions of the strategy for sustainable development of the our. However, a study of publications showed a lack of generally accepted understanding of what exactly these principles should reflect in relation to a particular industry.The paper examines the problem of industry differentiation of ESG principles in relation to housing and communal services, exacerbated by the diversity of the industry. It is noted that water supply is considered as an equal direction of sustainable economic development among 9 main ones. The key areas of the concept of sustainable development are compliance with environmental, social and economic principles in the operation of the enterprise. The same principles form the basis of the ESG approach.The purpose of the work is to substantiate the main directions for implementing ESG principles in the strategy for sustainable development of water supply.The work proposes the content of key components for the implementation of ESG principles in Russian water supply. It is also proposed to use these principles as components in the preparation of a system of indicators of consumer quality of corporate information systems of enterprises that provide relevant services.One of the practical directions for introducing ESG principles into the activities of water supply enterprises is their consideration in the process of developing the enterprise’s corporate information system. The work identifies specific principles that are included in the requirements for consumer qualities of a software product at the design stage of development and improvement of an enterprise’s corporate information system.

Уязвимость культурных кодов как угроза существования цивилизации

The article deals with the consequences of the vulnerability of cultural codes as an actual threat to the existence of human civilization with the uncontrolled and unreasonable use of artificial intelligence. Positive as well as negative options for the interaction of artificial intelligence with cultural codes that level the understanding of the basic universals of human behavior, communication, and activity are analyzed. The influence of the human factor on the use of acquired skills by strong artificial intelligence in non-standard conditions, the responsibility of a particular specialist for the quality and quantity of input data under the influence of his gender, confessional, national, racial, cultural and linguistic characteristics, leading the system to erroneous actions and conclusions, are investigated. The negative consequences of an uncritical perception of reality, the inability of a modern person to distinguish content from fakes that are becoming massive, replacing the existing reality, used for unseemly and criminal purposes are considered. The necessity of state regulation of the ethical behavior of business engaged in the development and implementation of artificial intelligence technologies, the establishment of ethical behavior standards in this innovative area, the signing of the Code of Ethics of Artificial Intelligence, adopted by representatives of leading domestic companies, are substantiated. The practical implementation of the areas of training of highly qualified IT specialists presented in it at universities, the system of additional education with the acquisition of demanded professions of specialists in data analysis and processing, ensuring the operation of corporate information systems, data analysis in the field of education, programmers, including at the Saratov National Research State University named after N.G. Chernyshevsky, Saratov State University of Genetics, Biotechnology and Engineering named after N. I. Vavilov.

Optimization of the business process of commercialization of developments for state educational institutions

The purpose of the study. Today, on the basis of modern universities, favorable conditions have developed for the development of innovations, scientific developments in various directions. At the same time, financing universities from the state budget does not stimulate them to profitability and competitiveness, which may lead to a lack of motivation for the introduction of commercial approaches. Another problem is that state organizations are often characterized by complex procedures and bureaucratic clumsiness, which makes it difficult to implement commercial management methods and business approaches. The presented research is aimed at identifying the features of the business process of commercialization in public educational institutions in order to find conditions for its optimization. The topic of finding ways to optimize business processes can help budget organizations become more effective in commercializing software development for electronic computing machines and further promoting information technologies in the domestic market.The research methods were determined based on the purpose and include the analysis of scientific publications on the research topic, the method of concretization, analysis and synthesis, practical modeling, timekeeping method, employee surveys and other methods. The information base of the study was the activity of one of the structural divisions of Tomsk State University. The Competence Center for Corporate Information Systems division was established at Tomsk State University in 2019 as part of the implementation of the Digital University program to optimize the project management system based on the 1C-Bitrix24 platform. 1C-Bitrix allowed introducing digital modules of electronic document management into all systems and processes of the University into the work of Tomsk State University. At this stage of the implementation of the Digital University program, the university is taking measures to put into operation the module for the registration of business trips of employees in electronic form in the "one window" modeResults. Commercialization of software development for electronic computing machines is necessary, first of all, to make a profit and develop the developer company. If innovative developments do not turn into commercially successful products, then the company may face financing problems (including in the case of government organizations) and even financial losses. The result of the study is an optimized process of commercialization of software development for electronic computing machines for Tomsk State University during the implementation of the Digital University program in 2022. The business process was studied and an option was proposed to reduce the time of passing the stages, which in turn will lead to financial savings. The result of the study was implemented in the activities of the Competence Center for Corporate Information Systems of Tomsk State University.Conclusion. The implementation of the technology commercialization process can be led by the relevant structural units being created in universities that would be engaged in the promotion of R&D and at the same time a base for their organizational and technical support was formed. Stakeholders here are: university research and teaching staff, students, university administration, consumer companies, interested private entrepreneurs, the public and authorities. All sides of the relationship should benefit from the work of such departments of universities.

Experience in Developing an Auto Parts Online Store Website Using the Yii Framework and Integration with the Company's Corporate Information System

Experience in Developing an Auto Parts Online Store Website Using the Yii Framework and Integration with the Company's Corporate Information System

Model of teleconsultation pharmaceutical integrated in the electronic clinical history of the patient

ObjectiveDescribe the phases of implementation, scaling and integration of a pharmacy teleconsultation model in electronic history, to coordinate the care transition of patients. MethodDescriptive and retrospective study in a health area of 500,000 inhabitants (3 years). In the first phase, a working group was created, a communication platform was designed and a continuity program was piloted between a hospital pharmacist and the 13 primary care pharmacists. The objective was to solve problems related to medications (especially those of sanitary approval) in polymedicated patients hospitalized in the Short Stay Unit-Emergency. In a second phase, the program included all the patients in any unit and all the pharmacists in the hospital. In the third phase, the program was extended to the teleconsultation format within the corporate information systems of the Health Service. Quantitative descriptive variables were recorded (number, motives and resolution of the teleconsultations). ResultsIn total, more than 470 consultations were registered (118 in the first phase, 158 in the second and 194 in the third), which were resolved in 90% of the cases. The main reasons were discrepancies in type approval drugs, prescribed in the care transition and nutritional assessment. ConclusionsTeleconsultation allows the coordination of pharmaceutical care between levels, quickly and easily. Increase the visibility and access of professionals. Problems are resolved without displacements or time delays for patients.

Penerapan Elementor sebagai Perangkat Pengembangan Platform Pengawalan Rancangan Kerja PT. PVI

In the pursuit of optimizing information systems and website development for PT. PVI (Renstra), an extensive analysis was conducted on the use of CMS WordPress supplemented with the Elementor add-on as the primary tool for website construction. This analysis sought to assess the feasibility and capabilities of Elementor basic in meeting Renstra's requirements. Various critical aspects were evaluated, including account creation, login and logout systems, as well as form display and integration. Elementor basic, while providing the convenience of a user-friendly drag-and-drop design interface, falls short of fully satisfying Renstra's needs. A significant challenge encountered was Elementor basic's inability to create a seamless account creation system integrated with login and logout features. This posed a hindrance for website users seeking to input data, as they were unable to smoothly implement login functionalities within Elementor basic. To address these challenges, several recommendations are proposed. Firstly, Renstra should consider upgrading to Elementor Pro, which offers an array of comprehensive features, including streamlined form integration and efficient account creation. Secondly, designing an efficient login system within Elementor Pro to enable users to effortlessly create accounts, log in, and access their work progress is paramount. Thirdly, meticulous attention should be given to integrating form submission and the Progress Bar to enable users to submit data effortlessly and view their progress directly on the website, eliminating the need for manual Progress Bar adjustments. Fourthly, leveraging Elementor Pro's additional design features can significantly enhance the website's overall appearance, ensuring it aligns with user requirements. Finally, Renstra should explore the development of supplementary features to enrich the user experience, such as enhanced work progress management, progress notifications for registered users, or more restricted access for specific users. Implementing these recommendations will enable PT. PVI to enhance the efficiency and effectiveness of their information system and website. This, in turn, will enable them to provide superior services to their users, enhance transparency in progress reporting, and ultimately achieve their goal of optimizing their corporate information system.