Corporate Information Systems Research Articles

The Model of Information Security Threat Profile of Corporate Information System

The level of information security of corporate information systems depends on the security of information assets of the enterprise in which the enterprise information systems are implemented. To protect data processed in corporate information systems, it is advisable to ensure the information security of the system, to identify and predict threats to information security violations. Such measures will ensure effective management of information security and high-quality response to threats in corporate information systems in real time. Thus, the research of threats management and information security of corporate information systems allows the authors to develop a model of threat profile. The difference from the previously proposed models is that the present solution defines the actions that need to be taken when threats are detected and to prevent them. Application of the proposed model will allow implementing special procedures of information security management of the enterprise, using private information security policies for corporate information systems. The authors highlight the key aspects of managing threats to information security of corporate information systems. The vulnerabilities typical for corporate information systems have been allocated. The sources of threats have been formed, and the potential violators have been described. A unique model of the profile of threats to information security for corporate information system has been developed.

Legal Aspects of Designing Security System for Critical Information Infrastructure in Ukraine

The emergence of the new types of crimes in the field of using electronic counting machines (computers), computer systems and networks and telecommunication networks makes the problem of protecting critically important information infrastructure relevant, and the development of information technologies and systems and the improvement of communication technologies, transfers these problems from the technical plane to the legal one. Critical information infrastructure acts as a set of territorially distributed state and corporate information systems, communication networks, switching facilities and information flow management, organizational structures and has a regulatory and legal regulation mechanism that ensures their effective functioning. A special place of critically important information infrastructure determines their key role in ensuring the normal functioning of practically all spheres of life of society and the state - political, economic, social, environmental, military and informational. The content of the security system operation for a critical information infrastructure includes the formation and management of the security system. The purpose of the security system for objects of critical information infrastructure is to ensure the proper functioning of the relevant facilities, including the cases of real threats to security system. When ensuring the security of objects of critical information infrastructure, the balance of interests of the state and society and the interests of the owners of objects must be achieved. In the article from the point of methodology of system analysis, the legal aspects of forming the security system of objects of critical information infrastructure are considered. On the basis of the analysis, the content of the security system of critical information infrastructure, the content of the security system, the necessity of elaboration of the draft law of Ukraine “On the objects of critical information infrastructure” and departmental normative acts on administrative procedures in the field of information security have been characterized.

РЕАЛІЗАЦІЯ КАДРОВОГО ЗАБЕЗПЕЧЕННЯ ЯК СКЛАДОВОЇ ІНТЕЛЕКТУАЛЬНОГО КАПІТАЛУ ПІДПРИЄМСТВ ВІТЧИЗНЯНОЇ МАШИНОБУДІВНОЇ ГАЛУЗІ: ІНСТРУМЕНТАРІЙ УДОСКОНАЛЕННЯ

Стаття присвячена дослідженню змісту кадрового забезпечення як складової інтелектуального капіталу підприємств вітчизняної машинобудівної галузі, запропоновано інструментарій його удосконалення. Встановлено, що розвиток сучасного підприємства забезпечується соціальною взаємодією її працівників і взаємодією самого підприємства з навколишнім середовищем. Обмін суб'єктивних цінностей працівників дозволяє значною мірою реалізовувати трудовий потенціал підприємства. Сам по собі процес формування інтелектуального капіталу підприємства представляє собою організаційно-управлінські інновації, які визначаються потребами інноваційного розвитку у виробничо-технологічній сфері. Обмін знаннями та навичками індивідуумів у процесі взаємодії є одним з найважливіших чинників розвитку національної інноваційної системи.Необхідною умовою модернізації української економіки є підвищення результативності інноваційної діяльності, яка в значній мірі визначається здібностями економічних суб'єктів до використання та генерації нових знань, отриманими інтелектуальними результатами, отриманими продуктивними відносинами із зовнішнім середовищем, що в трактується, як кадрове забезпечення, яке є необхідною складовою інтелектуального капіталу. Оцінка зазначеної складової інтелектуального капіталу є найважливішим інструментом ефективного управління його якістю в інтересах інноваційного розвитку машинобудівних підприємств і забезпечує зворотний зв'язок у людино-орієнтованому управлінні інноваційною діяльністю. У зв'язку з цим, розробка інструментарію удосконалення кадрового забезпечення як складової інтелектуального капіталу на сьогодні є актуальним завданням, що має вагоме наукове та практичне значення.Конкретизовано зміст поняття “кадрове забезпечення як складова інтелектуального капіталу”, дано авторське трактування поняття “кадрове забезпечення як складова інтелектуального капіталу машинобудівних підприємств”. Розкрито питання управління кадровим забезпеченням як складової інтелектуального капіталу вітчизняних підприємств машинобудування. Окреслено ряд проблем, які безпосередньо впливають на зростання інтелектуального капіталу в машинобудуванні України. Подано інструментарій розвитку машинобудівної галузі за рахунок удосконалення кадрового забезпечення як складової інтелектуального капіталу.Визначено модель інтелектуального капіталу, яка може бути інтерпретована за допомогою трьох основних складових: людський капітал (містить таку складову, як кадрове забезпечення); організаційний капітал (корпоративні інформаційні системи, бази даних, технічне і програмне забезпечення, організаційні структури, патенти, ноу-хау, ліцензії, товарні знаки, корпоративна культура); споживчий капітал (капітал відносин, що представляє причинно-наслідкових механізм взаємодії компанії зі споживачами, постачальниками, конкурентами, також соціально-економічний потенціал її брендів, торгових марок, іміджу та репутації). Зазначено, що в узагальненому вигляді структура кадрового забезпечення представляє собою чотири взаємодіючих компонента: моральні цінності (моральний і культурний рівні); творчі здібності (у тому числі, креативність); освіту (знання, отримані у процесі навчання); професіоналізм (досвід роботи з урахуванням виконаних трудових завдань).

Identifying the reasons for the complexity of the maintenance of corporate information systems

The structure of corporate computer networks and the classification of problems by its levels were considered. The main group of elements (application software, system services, and data banks), the corporate information system, is selected as the object of this research. The maintenance stage of corporate information systems is highlighted in the context of labor costs at this stage of the life cycle. For clarity, the process of maintenance is represented by a closed iteration system, where the duration and list of tasks depend on the problem type. In accordance with ISO 14764-2003, the three-level classification is proposed for the types of problems and activities in the maintenance stage of the corporate information system. The statistical analysis was performed of the time costs of maintenance using the proposed classification in the context of tasks and types of errors. Based on the results of the analysis, the main reasons for the complexity of the maintenance of corporate information systems were identified. These reasons determined the main direction of further research - processing of data banks in real time mode for localization of the client’s business process. This will reduce the time and financial costs of maintenance.

Choice of information system for Russian companies

The relevance of work is caused by the importance of an integrated approach to automating the business processes of organizations. Understanding the relevance of the problem came to Russia with some delay, in comparison with the West. Recently the interest in information technologies, which are inseparably linked with a concept of an information system of the corporate level and capable to provide effective management of the entity, has grown. Also the modern models of information technologies allow one to put into practice methods of the game theory by means of which it is possible to count and predict important results and on its basis to make the right management decision. The purpose of this work was to choose an optimal information system and to research efficiency of its application for the pharmaceutical company Pharmstandard. Mathematical and marketing methods were used during the research. The choice of a certain corporate information system and calculation of efficiency of its usage and a payback period are the result of the work. Results of the conducted research can be used by the specialists of various industrial enterprises for development of the competitive activities in the sphere of strategic planning.

Analysis of corporate information systems vulnerability

На сьогоднішній день бездротові корпоративні інформаційні системи є невід’ємною складовою конкурентного функціонування сучасного підприємства. Зручність використання, майже не обмежений функціонал, не висока вартість розгортки систем – це основні переваги даного типу систем. Оскільки конфіденційна інформація підприємства (електронні пошти, паролі до облікових записів, реквізити доступу до серверів, хеш-дані облікових записів користувачів та інша інформація, якої немає у відкритому доступі) є метою для багатьох кіберзлочинців, дані технології часто підлягають атакам різного роду. Таким чином, проблема визначення та аналізу вразливості інформаційної безпеки в корпоративних інформаційних системах є актуальною на сьогоднішній день. Проводячи аналіз ми спирались на дослідження зарубіжних вчених та практикуючих компаній, що займаються вивченням загроз та розробкою систем їх запобігання. Дослідження даного питання дає можливість визначити та класифікувати можливі загрози та модернізувати існуючі або розробити нові ефективні методи та заходи інформаційної безпеки.

Organization of functional interaction of corporate information systems

In this article the methods of specialized software systems integration are analyzed and the concept of seamless integration of production decisions is offered. In view of this concept developed structural and functional schemes of the specialized software are shown. The proposed schemes and models are improved for a machine-building enterprise.

Цифровая трансформация экономики на примере общего энергетического рынка ЕАЭС

The article considers proposals on the principles of the Eurasian Union countries common energy market formation in the digital economy era and the list of priority projects for its transformation. The future state of the markets in the digital economy era is characterized by a significantly higher percentage of the added value compared to the current numbers, due to the acquisition, processing and dissemination of information and the transition to new production technologies that generate huge amounts of digital information that is flowing in both the state-owned and corporate information systems.

Разработка корпоративной информационной системы для управления контентом интернет-ресурса предприятия

Existing software products for content management of the enterprise Internet resource are difficult for the staff who are responsible for the content management or do not provide the necessary level of security and functionality. According to the author, it is necessary to develop requirements for a corporate information system that allows you to manage Internet resources effectively.

Improvement of tools for decision support systems (DSS) in corporate information systems of industrial enterprises

Modern industrial enterprises require more qualitative and indepth approaches to the processing of accounting information and its subsequent use in operational activities. The study presents the research results of current situation over the problem that need to be solved by forming and improving the tools for decision support systems. According to the authors of the article, such a toolkit should be an integral part of the corporate information system along with other vital modules.

Аналіз формальних моделей та стандартів опису структурованого електронного документа в корпоративній інформаційній системі

Permanent acceleration of development of information technologies and the resulting changes in typical business processes of organizations create new forms of complexity of electronic document flow while creating modern corporate information systems. The main task in mapping structured documents to electronic form is to define the universal mechanism of document markup and to determine its specific information fragments for correct interpretation in software applications. A comparative overview of the existing languages for describing structured electronic documents and the standards on which they are based is provided. The advantages and disadvantages of their use for addressing typical tasks of electronic document flow organization that arise while developing corporate information systems are determined. Problems in programming 2018; 1: 128-146

Метод структурирования контента гетерогенного информационного пространства на основе формализованной модели предметной области для решения задач интеллектуального поиска

The problems of construction and integration of information retrieval systems with corporate information systems are considered. A model of information query and search results for the database and file data stores is described. The task of information retrieval is represented as the interaction of domains using an adapter. The task of the adapter is to convert the information needs, expressed in the language of a particular document into a search query, presented in the language of the information retrieval system. The representation of search queries in the language of the search engine assumes the following order of operations: the definition of the target entity, the conversion of the criteria specified by the user, and the addition of criteria specified by the source system. An algorithm for the order of the transformation is proposed in the general form. The implementation of the proposed model in the PHP framework of the web portal based on the Apache Solr search engine is considered.

Разработка модели безопасной информационной системы, использующей облачные сервисы

The aim of the study is to offer to the developers of corporate information systems that use the cloud infrastructure the possibility to reduce the time taken to ensure information security in constructing such a system. The main types of clouds, the risks to information security arising from their use, and the models of providing cloud services are analyzed. A cloud is considered from an architectural point of view. A generalized model of a secure information system using cloud services is proposed that takes into account the currently existing information risks. The idea of incorporating patterns containing the classification and characteristics of risks into the model is formulated. An undirected graph with the cloud structure is presented. The use of the developed model opens the possibility to obtain a qualitative assessment of information risks typical for corporate information systems with cloud services.

ASSESSMENT OF THE ECONOMIC EFFICIENCY OF IT APPLICATION AT ENTERPRISES

The article covers theoretical aspects of the necessity of information technologies’ introduction and development at the enterprise. There was substantiated the importance of the introduction of modern information technologies and their influence on the effective activity of the enterprise. There were generalized the conditions and consequences of technologies introduction, the main trends of IT development at enterprises, and possibilities of modern technologies use. The composite analysis of the methods for assessing the efficiency of information technology use conducted made it possible to compile the methods into three groups (methods of financial analysis, methods of qualitative analysis, methods of predictive analysis) and to distinguish their characteristics and possibilities of use. There were considered the most popular structural modules of the corporate information and technological system (CIS) in the world. There was the generalized structural composition of the ERP-system with MRP, SRM, CRM, and CSRM modules. There were determined the main characteristics of IT systems, advantages and disadvantages of integrated CRM modules – customer relationship management system, BI data analysis systems (SAP, Microsoft Dynamics AX, Oracle BI systems), communication management system with SRM providers; 1C: Enterprise 8 – system of bookkeeping and management accounting use and the possibility of their association in CIS as: CSRP Enterprise Resource Planning System (Customer Synchronized Resource Planning). Resource planning technologies are functionally related in such a system, modules of CRM strategies are integrated, interaction with buyers and customers and bookkeeping analysis and accounting are synchronized. The method of economic efficiency determination with the improvement of calculation algorithm is proposed. The main stages of assessing the effectiveness of IT introduction and application at the enterprise can be summarized in three stages: preparation – analysis and assessment of the technology selection; introduction – analysis and assessment of direct costs and substantiation of expediency; implementation – assessment of economic efficiency of application and calculation of intellectual depreciation and possible stepwise modernization of information technology in future. The multiplicity of introduction goals and sources of IT payback requires a differentiated approach to the determination of the criteria for their effectiveness assessment. There was developed an algorithm of determination of the economic efficiency of IT introduction in the activity of the enterprise. The traditional way of profit assessing from the IT introduction does not ensure full consideration of qualitative and strategic efficiency, therefore, it requires additional use of predictive methods that allow supplementing quantitative calculations. The author proposed to calculate the efficiency of introduction, modernization, and use of IT projects, use of scenarios analysis methods, which include the Black-Scholes model and the binomial model for calculating the effectiveness of real options. The author considers the application of the Black-Scholes-Merton model to be the most expedient because, in contrast to the binomial one, it is easier to use but allows obtaining a result with minimal errors, without significant time costs close to the definitions of the binomial model. The use of such a model has already proven effective not only when calculating the effectiveness of real options, but there are also positive results of the study when using them in other areas of analysis. We consider it economically feasible to use methods determined by the author to assess economic efficiency of IT use.

ANALYSIS OF THEORETICAL AND METHODOLOGICAL PRINCIPLES OF ENTERPRISES INVESTMENT ATTRACTION EVALUATION

The purpose of the article is to systematize theoretical and methodological principles and justify the application of an integrated approach to assess the investment attractiveness of enterprises. Among the approaches we can highlight the following ones: cost, spatial, income, factor, matrix, integral, analytical, approach, which is based on determination of the current and future status of investment attractiveness of enterprises, comparative, approach, which is based on the system of qualitative and quantitative indicators that is applied to assess the investment attractiveness of enterprises, approach, which is based on the application of the correlation and regression analysis method, an investment-based approach. In order to determine the investment attractiveness, it is proposed to use an integral approach based on appropriate methods and models that allows us to estimate the integral indicator for the formation of the estimated basis for increasing the investment attractiveness of the subjects of management. The methodological approach to the integrated assessment of the investment attractiveness of enterprises is proposed. It is based on the definition of the integral indicator and the application of analytical, expert and hierarchy analysis methods by modelling the investment attractiveness indicators. This approach enables to form informational and analytical support for the development of the enterprise management strategy. It has been determined the information and analytical support for estimating the investment attractiveness of enterprises on the basis of accounting and financial reporting, data on the application of technologies and means of production, level of preparation and use of workers, features of the material and technical base, directions of interaction between different groups of interested persons, information regarding the application of scientific and technical development, which ensures the security of the corporate information system, the quality and completeness of information.

Цифровизация управленческих процессов в научно-образовательных организациях

Document circulation and communication between organizations, their structural subdivisions and employees are increasingly being made on the basis of infocommunication technologies and paperless digital approaches. This article provides a review of existing information systems, the main activities of scientific and educational organizations, ways of interaction with state and commercial enterprises. The analysis of general types of administrative and economic, financial activity, as well as scientific, educational, publishing activities, specialized for academic institutions is given. It is considered domestic, works dedicated to automation of processes and the introduction of information systems in scientific and educational organizations, as well as existing foreign technologies for automating the learning process. Most existing Russian and foreign systems include modules that provide electronic document management and communication. Despite existing standards, scientific and educational organizations are difficult to unify, due to their specialization and historically established traditions. Due to the multifaceted activity of scientific and educational organizations, to the problem of integrating modules developed at different times for different services accumulating databases with duplicate information. Information is provided on the corporate information systems developed in SPIIRAS, distinguished by the use of biometric contactless means of interaction with users and personalized maintenance scenarios.

Critical Capabilities of Corporate Information Systems

—this paper aims to identify the critical factors for evaluating the capabilities of corporate information system in Palembang from the perspective of the IT infrastructure and IT human resources competence. To fulfill these objectives of the study, this study adopts a conceptual framework that is developed by Antoni and Jie (2012). The framework consists of IT infrastructure quality and competence of IT human Resources, which are used as foundation of business operations in organizations. There is a need to develop their capabilities through the adoption of IT to enhance its performance and enhance their competitive position in the market place. IT capability is an organizational ability in effectively and efficiently using their IT resources, which can be determined by IT infrastructure, and IT human resource competencies. Findings indicate that there are many the critical capabilities of IT infrastructure and IT human Resource capabilities that can be utilized by organizations to develop their competencies in order to improve business performance. In Addition, the findings of the study would be of practical significance to the continuous improvement of organizational performance in Palembang and other cities in Indonesia.n n

Dynamics of Governance in IS Outsourced ERP Implementation : Case-based Exploratory Study

New paradigm has been emerging in a way firms utilizing information and communication technology (I & CT) and corresponding business process innovation in order to maintain firms’ competitive advantage since early 90’s. Those are said to be Enterprise Resource Planning (ERP) system and Business Process Reengineering (BPR) or Process Innovation (PI). In contrast to traditional methodology for developing in-house corporate information system (CIS), there need to develop new breed of methodology for ERP implementation for two reasons. One is distinctive set of features of ERP system; and, the other is the way and governance structure of working in ERP implementation. Regarding the governance structure, firms tend to work with consulting firms for ERP implementation since it is on its early stage in lifecycle. There has been a log of studies done in ERP implementation. Most of the previous studies concerned about implementation methodology and implementation impacts on firm’s performance and competitiveness. As firms used to work with outsourced consulting firm for their ERP implementation, there has been a few studies how to effectively and efficiently work with outsourced firm in ERP implementation. In our study, we borrowed Huber, Fisher, Dibbern and Hirschheim’s (2013-2014) process model and applied the model in ERP implementation. Firstly, we matched the three adaptation triggers along with ERP implementation process. Secondly, we observed the dynamics of governance types during the implementation process. Lastly, we proposed adaptation outcomes focusing on the ERP implementation process by exploring a well-known Korea company in its ERP implementation.

ОТ ВЫЧИСЛИТЕЛЬНЫХ К ЧЕЛОВЕКО-ОРИЕНТИРОВАННЫМ ИС

Показано, что классификации технологических эпох (индустриальная, постиндустриальная, информационная эпохи и эпоха знаний) можно сопоставить соответствующие этапы развития в ИТ, в эволюции корпоративных информационных систем. Такой подход позволяет выделить четыре класса информационных систем: вычислительный, процессный, контентный и человеко-ориентированный. Вычислительные информационные системы были предназначены для управления ресурсами предприятиями. Задача процессных информационных систем состояла в автоматизации управления отношения с клиентами и партнерами, с автоматизацией процессов workflow внутри компании. В современное время большинство компаний внедряет контентные информационные системы, которые помимо систем управления контентом включают в себя аналитические системы, технологии анализа больших данных, системы управления ключевыми показателями и т.п. Однако именно класс человеко-ориентированных систем должен стать доминирующим по мере развития цифровой экономики. Отличительные особенности человеко-ориентированных информационных систем и принципы их построения обсуждаются в статье. Помимо сравнения с корпоративными информационными системами человеко-ориентированные системы сравниваются с современными интернет сервисами с точки зрения масштаба, требований к пользователю, подходов к разработке, требованиям к архитектуре и к информации. It is shown that classification of technological eras (industrial, postindustrial, information age and knowledge age) can be mapped to the corresponding stages of development in ICT and in the evolution of corporate information systems. This approach allows us to distinguish four classes of information systems: computing, process, content and human-oriented. Computing information systems are designed for resources management of enterprises. The tasks of the process information systems are in automation of the management of relationships with customers and partners, in automation of workflow within the company. In modern times most companies is implementing content information systems in addition to content management systems include analytical systems, technologies of Big data, management systems key performance indicators, etc. However, it is the class of human-oriented information systems will be dominant with the development of the digital economy. The distinctive features of human-oriented information and the principles of their construction systems are discussed in the article. In addition to comparisons with corporate information systems human-oriented information systems are compared to modern Internet services, in terms of scope of size, requirements to user, development approaches, requirements for architecture and for information.

ビジネスシステム変革における情報システムのマネジメントの一考察 : セーレンのケース( ITとマーケティング)

ビジネスシステム変革における情報システムのマネジメントの一考察 : セーレンのケース( ITとマーケティング)