Information Systems Function Research Articles

PROCESSES OF THE TELECOM OPERATOR’S INFORMATION ARCHITECTURE TRANSFORMATION

The subject of the article is the architecture of information systems of telecom operators (BSS/OSS), requirements for it and the processes of its transformation. The goal is to transform the existing information environment of the operator into an open digital ecosystem, in accordance with business and technological requirements for the functionality and architecture of information systems of communication operators, which will introduce new business models, services and products, communication channels, and increase competitiveness. The following tasks were solved at the study: analysis of the current state of telecommunications and information systems used by telecom operators; analysis of requirements for business support and operational information systems, collection and analysis of requirements for the architecture of modern information systems in the field of telecommunications, analysis of the transformation process from the existing BSS/OSS architecture of the communication operator into the target architecture of the digital communications provider, elaboration of a recommendations for an intermediate architecture. To solve these problems, methods of system and business analysis were used, in particular, methods of analysis of software requirements, technologies for developing software application architecture. The following results were obtained. The current state of the telecommunications services industry, the features of the existing information systems of telecommunications operators (BSS/OSS) and the requirements for the architecture of such systems was analyzed. Strategies of transition to modern architecture was considered and analyzed. The target architecture of the digital service provider's information ecosystem and the process of transforming the existing BSS/OSS architecture into the target architecture were considered. Intermediate migration architecture was proposed. Conclusions: the transformation to modern information architecture will ensure compliance of BSS/OSS systems with market requirements and new technologies, adapt to their changes, allow operators to increase competitiveness, reduce operating and capital costs, create technological conditions for open digital ecosystem and transform the operator into a digital services provider. It was recommended to use an intermediate architecture based on the open standardized TMF API for such transformation.

Implementation of a combined algorithm designed for increasing the reliability of information systems

This paper considers the results of experimental studies of the previously presented algorithm designed for increasing the reliability level of information systems. The data on the organization and conduct of the studies is provided to clarify their meaning. Within the framework of the study conducted, the obtained experimental data of simulation modeling and the functioning data of existing information systems are compared. The hypothesis of homogeneity of the structure of information systems has been formed, thereby reconfiguring the presented algorithm into a model for the analysis of information systems. The results presented can be used in further research activities. The obtained data on the opportunity to predict the functioning of information systems can be used for economic planning.

ORGANIZATION OF USER ACCESS DIFFERENTIATION TO INFORMATION SYSTEM FUNCTIONALITY

This article offers practical guide on how to organize user access differentiation to information system functionality on the basis of the author's improvement of the classical scheme of the Role Model of user access control. Recommendations on the implementation of the proposed system of access differentiation in the information system are given. The peculiarities of the construction of the mechanism of user authentication using web-tokens in the context of the proposed system are briefly touched upon.

METHODOLOGY FOR THE FORMATION OF INFORMATION SYSTEMS FALSE NETWORK TRAFFIC FOR PROTECTION AGAINST NETWORK RECONNAISSANCE

Simulation of false network traffic in order to protect the structural and functional characteristics of information systems is a difficult task in view of the self-similarity of its statistical properties in IP networks, not only in the current moment, but also retrospectively. A Hurst index based algorithm for assessing the degree of self-similarity of network traffic of information systems has been proposed. The connection between the fractal dimension of the attractor of the model of information system functioning and the Hurst index is shown. A technique has been developed to substantiate the characteristics of false network traffic to simulate the functioning of information systems in the process of reconfiguration of their structural and functional characteristics caused by an intruder conducting network reconnaissance. The methodology allows to solve the problem of improving the protection of information systems from network reconnaissance by providing the maximum likelihood of false network traffic by pseudophase reconstruction of the dynamic system attractor, approximating the time series of information traffic of the protected object. The approaches to the description of the network traffic of the information system are considered, the parameters determining the network interaction between the two nodes of the data transmission network are selected as follows: source IP-address, source port, destination IP-address, destination port, protocol, packet size, duration of connection. The process of functioning of information system in different situations is formalized and the dependences allowing to synthesize parameters of false network traffic, statistically similar to the reference ones are received.

Ecosystem services assessment and sensitivity analysis based on ANN model and spatial data: A case study in Miaodao Archipelago

Ecosystem services (ESs) assessment is an important basis for the island protection and utilization plan development. The application of artificial neural network (ANN) to ESs assessment is a new attempt. Herein, an ANN model for the assessment of 5 ESs including carbon sequestration (CS), habitat quality (HQ), nutrient retention (NR), sediment retention (SR), and water yield (WY) of Miaodao Archipelago is established by taking the advantages of InVEST model and the powerful spatial analysis function of the geographic information system (GIS), as well as the self-learning and self-adaptive characteristics, and prediction function of ANN. The independent sample test shows that the correlation coefficient between the model prediction value and InVEST model simulation value is 0.88 (P < 0.001), and the average absolute error of the simulation is 10.33%. The 5 ESs of the Miaodao Archipelago in 2019 was then simulated using the trained model. The comparison with the corresponding data in 2010 suggests that CS, SR and HQ are in decline, while WY is in upward. The impacts of land use on ESs are then analyzed with the ecosystem service change index (ESCI) in different land use scenarios. An ANN model based quantitative method for evaluating the sensitivities of ecosystem service (ES) to typical environmental factors is proposed. The modeling results suggest that the ANN based model can accurately quantify the importance of different environmental factors to the island ESs, and give the comprehensive impact of multiple factors on the ESs. Therefore, the ANN model combined spatial data analysis provides an important means for ESs assessment and sensitivity analysis.

Outsourcing Document Management System / Application as Key Factor for Compliant Process Implementation and Increasing Management Efficiency

Today, in knowledge and information technology era, the world’s businesses, both large and small, are increasingly seeking to use information technologies – especially information systems. There are implemented and maintained several of information systems: resource view based, customer orientated, document exchange information systems and universal ones, as opposed to specialized, and contains a lot more functionality offer. Information systems are implemented to ensure the core business functionality by automating certain processes, providing benefits such as business process transparency, arrangement and actualization. By the use of information systems certain services became popular, which are related with the established information system maintenance – the ongoing process of auditing, risk identification and management, and compliance regulations, laws, standards and guidelines. Such compliance is essential for the better functioning of information systems and aligns its activities. This article explores a theory of IT outsourcing and IT Compliance definition to give an idea of the need for it, and point to the benefits organizations can in carrying out these processes – system dynamics modeling research method was used in following research.

Support of individual educational trajectories based on the concept of explainable artificial intelligence

Introduction. Professional education in the context of individual educational trajectories (IET) meets the needs of both students themselves and the labour market due to the relevance of the content, flexibility of the educational process and learning technologies. However, in the context of digitalisation, IET support, including their planning and subsequent management of learning, entails the emergence of new requirements for information, analytical and methodological support of information systems designed to manage the educational process of the university. The problem of this study is determined by the contradiction between the intensive growth (natural for digitalisation) in the volume and variety of types of collected data, which can and should be used to support IET. In addition, there is also a lack of adequate analytical tools in educational information management systems.Aim. The present research aimed to study and test the digitalisation methodology for IET support, based on the application of the concept of explainable artificial intelligence for analysing student digital footprint data, the content of documents regulating the educational process, as well as labour market demands.Research methodology and methods. As a theoretical basis for the study, the authors relied on the principles of explainable artificial intelligence and their application to the interpretation of data from the educational process and the prediction of educational outcomes. The methods of intellectual analysis of texts in natural language were employed for preliminary processing of source documents. To predict educational outcomes, the authors used clustering, classification and regression models created through applying machine learning methods.Results. The authors developed and studied predictive models with the subsequent formation of recommendations for the tasks of choosing an educational programme by applicants, choosing an elective discipline, forming a team for a group project and employment in accordance with professional competencies. The developed computer program automatically generates objective and explainable recommendations based on expert knowledge and predicting results. The algorithm for constructing recommendations is divided into stages and provides for variability in decision making.Scientific novelty. The authors proposed a methodology for digital support of IET, corresponding to the principles of explainable artificial intelligence, i.e. machine learning models predict educational outcomes, and a special algorithm automatically generates personalised recommendations based on the results of the analysis of data on the educational process. The developed approach confirmed its effectiveness in testing on the example of bachelor’s and master’s degree programmes in the field of computer science, information technology and information security.Practical significance. A preliminary analysis of significant volumes of initial data made it possible to obtain objective information about the data quality, including the content and structure of documents presented in various university information systems. Based on the the oretical results of the research, the authors developed a recommendation system. It included special services for students, teaching staff, tutors, and administrators, providing visual and user-oriented predictive results and recommendations. Testing of services at the Institute of Mathematics and Computer Science of University of Tyumen confirmed the feasibility of developing the functionality of the university information systems in the direction of collecting and analysing data from a student’s digital footprint and the relevance of this analysis results both by subjects of the educational process and by the labour market.

The Optimization Analysis of Phishing Email Filtering in Network Fraud based on Improved Bayesian Algorithm

Mail transmission was not only the main function of information system, but also the main way of network virus and Trojan horse transmission, which has a key impact on the running state of information. In order to deal with the threats of network viruses and Trojans and improve the level of e-mail management, this paper studies the filtering of information system, and proposes a phishing e-mail filtering method based on Improved Bayesian model. MATLAB simulation results show that the consistency p between the amount of data sent by e-mail and the amount received is good, the consistency rate reached 92.3%. the data security level is 95%, encryption proportion / data proportion ratio under Bayesian optimization are higher than those of unfiltered method，which up to 97.2%. Therefore, the Bayesian optimization model constructed in this paper can meet the needs of phishing email filtering in information communication at this stage.

DEVELOPMENT OF RECOMMENDATIONS FOR REDUCING CYBER THREATS DURING REMOTE WORK FROM THE POINT OF VIEW OF CYBER SECURITY

For several years in a row, Ukrainian organizations (first due to the Covid-19 pandemic and its consequences, and now military operations) and in general the world, have been forcibly transferring employees to a more optimal work format - this is remote work (work at home). According to statistics, this practice has shown its positive side in terms of higher labor productivity (less time spent on moving around the city, comfortable home conditions, etc.), however, from the point of view of cyber security, there has been an increase in cases of cyber threats (hereinafter - cyber threats) and the activation of cyber criminals. Remote work mode means full or partial transition to the use of personal devices by employees. Setting up remote work of employees requires a clear preparation of information systems within the organization, therefore information security (hereinafter - IS) and information technology (hereinafter - IT) services must ensure the security and continuity of the organization's business processes. Because remote work is associated with a high risk of cyber threats and the intervention of cybercriminals. Cybernetic threats (cyberthreats) are existing and/or potentially possible phenomena and factors that pose a danger to the vital interests of a person and citizen, society and the state, the implementation of which depends on the proper functioning of information, telecommunication, and information-telecommunication systems [1]. The formation and effective implementation of cyber security, within the framework of which a set of recommendations and measures for predicting and countering cyber threats is developed, is a necessary condition for the safe and continuous functioning of the organization.

PECULIARITIES OF INFORMATION AND ANALYTICAL SYSTEM OF NATURAL RESOURCES MONITORING

The state of functioning and development of the state environmental monitoring system and its compliance with current requirements have been analyzed. The troublesome issues of insufficient efficiency of this system due to the interaction of environmental monitoring entities, their tasks and fundamental principles of organization have been studied. The priority directions of the state ecological policy concerning creation of effective information and analytical system of monitoring of natural resources have been offered. The functioning of an effective information and analytical system of environmental monitoring is an integral part of state policy in the field of environmental protection. The key purpose of environmental monitoring is collecting, storing and processing reliable and up-to-date information necessary to develop measures to prevent and reduce the negative consequences of changes in the environment. The importance of introducing an effective environmental monitoring system is of vital importance in the context of reforms of environmental management and protection. All indicators of environmental monitoring should become part of a single national network. It will include information on the state of air, surface, groundwater and marine waters, lands, soils, forests and biodiversity, as well as monitoring waste management, geological processes and the effects of temperature, noise, vibration, and radiation on people and the environment. The environmental monitoring system is an integrated information system that should collect, store and process environmental information for departmental and comprehensive assessment and forecast of the environment, biota and living conditions, making sound recommendations for effective social, economic and environmental decisions at all levels of state executive power, improvement of relevant legislative acts as well as fulfillment of obligations of Ukraine on international agreements, programs, projects and activities.

Development Strategy of College Sports Information Management System Using Data Mining in Mobile Internet Environment.

A strong basis has been set for the digitization of school management by the growth of big data and the Internet. However, there is not specialised software that can be used in schools to handle teaching materials and carry out teaching activities, particularly in school physical education. Most teachers struggle with significant information management issues in the conventional college sports management information system. Along with people's interest in physical education in colleges and universities, the study of the college sports management information system's development plan has emerged as the primary research area in the present day. The use of data mining in the development strategy of the sports management information system was therefore considered in conjunction with the actual situation of school sports information management. The experiment also introduced and provided a detailed explanation of the algorithm used in data mining. To fully explore the system strategy's development impact was the specific goal. In order to realise the management function of the sports management information system, serve the information management of each school, increase information management efficiency by 6.58%, and improve user satisfaction; data mining was introduced into the development strategy of management information system through the discovery of experimental data.

УПРАВЛІННЯ ІНФОРМАЦІЙНИМИ ПОТОКАМИ ПІДПРИЄМСТВА: СУТЬ, ВИДИ ТА КЛАСИФІКАЦІЯ

The article reveals the need to consider information flows at transport enterprises, in particular, automobile ones. Considered types of information in the logistics system, namely functional and pragmatic. The factors of the microand macro-environment and their components of the formation of information flows of the enterprise are determined. The concept of the flow of discrete information and monitoring information about a competitor of the enterprise, taking into account its validity and intentions, is revealed. A generalized classification scheme of information flows at the enterprise is given. Information flow management support is listed. The types of information flows are analyzed depending on the features of classification and their content is revealed. Considered information flows in the logistics direction of the enterprise. The concept of information capabilities (potential) of the manager and information resources of the enterprise and their role for the success of the organization are disclosed. Controlling of checking the information flow within the enterprise for quality analysis and interpretation of information, which is necessary to improve the enterprise's activity indicators, is provided. The considered information service system as a means of managing the enterprise's corporate information system. The role of information flows in the activities of enterprise managers is revealed and the stages of their actions regarding the adoption of a management decision are given. Modern information technologies of information flows are given, namely: when the information flow precedes the material flow, accompanies the material flow and lags behind it, which affects the result of the management decision. The main criteria for the quality of the functioning of the corporate information system and the criteria of compliance, which form the quality of information that enters the internal corporate turnover, are considered. These are timeliness, truthfulness, relevance, usefulness, completeness and comprehensibility of information. The document processing automation program "BAS Document Processing KORP" is considered, which is used to optimize the organization and control of the company's data accounting. The essence, norms and role of document flow in the organization and the necessity of its automation in order to increase the productivity of employees and the efficiency of the enterprise as a whole are determined.

Метод обеспечения устойчивости вычислительного процесса в условиях воздействия вредоносных программ

Objective: develop a method and means to ensure sustainable functioning of the software mission-critical information systems under impact malicious software. Methods: analysis and classification of malicious software and means of protection against it, synthesis and modeling of correct behavior of programs, temporary automata. Study results: the characteristic of methods and means of detecting malware, which using masking methods, rootkit mechanisms and hardware virtualization technologies is given. A methodology for constructing profiles of the correct functioning of controlled programs in the form of a set of permissible execution routes has been developed. A method for monitoring and controlling the correctness of the current state of the computing process by comparing it with reference profiles has been developed. The method allows real-time detection and counteraction of malicious programs, which using various techniques of implementation and masking, including rootkit mechanisms, hypervisors based on hardware virtualization technology, interception and introduction in system functions in RAM.

ИНТЕЛЛЕКТУАЛЬНЫЕ СЕНСОРНЫЕ СЕТИ ДЛЯ МОНИТОРИНГА И УПРАВЛЕНИЯ СЛОЖНЫМИ СИСТЕМАМИ В УСЛОВИЯХ НЕОПРЕДЕЛЕННОСТИ

Within the framework of the Industry 4.0 concept, intensive development of the processes of intellectualization of sensor systems is envisaged. Among the most important specific properties of real measuring processes in complex systems is, first of all, their implementation under conditions of considerable uncertainty. The uncertainty is caused by a priori incompleteness, inaccuracy, vagueness of information about a complex measuring object and its functioning environment, which does not allow to build an adequate model of the object before the measurement experiment, to identify and formalize the influencing factors of the external environment and to develop effective algorithms for the functioning of information and measurement systems. The report proposes an approach to the intellectualization of measurement systems in conditions of uncertainty by creating intelligent sensor networks based on Bayesian intelligent technologies (BIT) and means of their implementation. Typical modules of such networks are considered, which are integrated sets of various sensors and intelligent measurement information processing systems. The results of the networks are comprehensive assessments of the state of complex objects and recommendations for providing of their sustainable functioning. An important part of such systems is the builtin means of a complete metrological justification of all received solutions. The systems have a hierarchical architecture, according to the levels of management of complex objects, which has the possibility of selfdevelopment based on newly received information. This is achieved thanks to models and scales with dynamic constraints on which all BIT algorithms are built. The report provides examples of the use of intelligent sensor networks for monitoring and control of power generation and water supply systems.

К ВОПРОСУ РАЗРАБОТКИ МОДЕЛИ ТРАНСПОРТНОЙ СИСТЕМЫ ИНДИВИДУАЛЬНЫХ ПЕРЕМЕЩЕНИЙ С УПРАВЛЕНИЕМ

Within the framework of the article, a generalized mathematical model of the transport system of individual movements is formulated, containing the control process in a general form, numerical schemes for solving the tasks are presented. The description of the model is expanded by the equations of the control process and the intensity of operations to be able to consider the problems of equilibrium of transport systems, taking into account the functioning of information systems of road transport.

The problem of semantic contradictions in large volumes of data

The problem of eliminating the redundancy of semantically close textual information based on latent semantic analysis and one of the fuzzy inference algorithms is considered. A description of latent semantic analysis as a method of detecting the semantic proximity of documents is given. A variant of fuzzy inference rules for solving the task of eliminating the redundancy of semantically close information is formulated. It is proposed to evaluate the degree of impact of the contradiction elimination module on the operational efficiency of information systems. In order to assess the efficiency of the functioning of such systems, two approaches to the implementation of the function of eliminating contradictions are proposed: 1. Initially, the request is executed in its pure form without the participation of the contradiction elimination module. If as a result of the query we receive no more than one fact, then the result is passed to the upper level. When receiving more than one fact, there is a contradiction, the result is transferred to the contradiction elimination module. 2. All obtained results are transferred immediately to the contradiction elimination module, regardless of the number of obtained facts. It is obvious that the application of different approaches will affect the operational efficiency of the information system in different ways. In the first approach, the degree of influence of the heating module will depend on the number of contradictions. The article proposes to evaluate the degree of influence of the module of elimination of contradictions on the efficiency of the functioning of information systems. Redundancy in large volumes of data based on latent semantic analysis and fuzzy inference can, in our opinion, significantly reduce the amount of data stored.

ВПРОВАДЖЕННЯ СИСТЕМИ УПРАВЛІНСЬКОГО ОБЛІКУ НА ПІДПРИЄМСТВІ: ОРГАНІЗАЦІЙНИЙ АСПЕКТ

The conditions for the effective operation of the enterprise on the market require the formation of an internal information system for the management of the business entity, which is based on management accounting data and contributes to the improvement of the efficiency of management decision-making in the process of operation. The article updates issues related to the practical implementation of the management accounting system at Ukrainian enterprises. It has been established that, characterizing management accounting either as a separate system or as a subsystem of accounting, scientists unanimously identify identical functions and tasks inherent in it. The article highlights the following functions of management accounting: ensuring the functioning of information systems for the automation of enterprise management; monitoring of the main areas of financial and economic activity; coordination of activities to achieve operational and strategic goals; provision of informational and advisory support for making management decisions; development of measures to improve the efficiency of the financial and economic activity of the enterprise. The factors on the basis of which the management accounting system is created at the enterprise were studied: unsatisfactory economic indicators; emergence of new goals; inconsistency of goals; outdated methods of planning, costing and analysis; lack of accounting and analytical methods that do not meet the requirements of monitoring financial and economic activity; repetition or absence of certain functions, conflicts in the process of their implementation. The most widespread errors in the implementation of the management accounting system were identified: misunderstanding of the essence and tasks of management accounting; wrong choice of goal; too much or not enough information; excessive amount of controlled indicators; wrong choice of information sources; focus on costs and full budget control; lack of income and risk analysis; organization of management accounting without prior examination of the reliability of information sources at the enterprise; integration of management accounting into other departments. It was found that the implementation and organization of the management accounting system is a complex and expensive process, but, as global and domestic practice has shown, it is a necessary part of business management.

Digital technologies as a modern tool of forensic construction and technical expertise

Digitalisation is embracing more and more activities, including such an integral part of it as judicial proceedings. The effectiveness of judicial proceedings largely depends on forensic activities, the results of which provide evidence in criminal, administrative and civil proceedings. The structure and peculiarities of information support of forensic construction and technical expertise are determined by the goals and objectives of this or that type of expertise. The need for digital transformation of information support is very significant for experts working in any area of forensic expertise, but for construction experts this problem is the most acute. This is due to the very significant scope of forensic activities in this area. The list of issues dealt with by the construction forensic expert is comparable to the scope of those issues dealt with in the construction and operation of construction projects. It is impossible to conduct forensic construction investigations without constant use of scientific, normative-technical and methodological sources both modern and previously published. All these facts determined the necessity of formation and development of the system of information support of this activity which meets the requirements of the present time. The article presents the basic principles, the observance of which ensures the efficiency and effectiveness of this system. The list of the specified principles includes: a principle of necessity of the information, a principle of obligatory knowledge of a degree of reliability of the information, principles of its completeness and a variety, principles of urgency and simplicity, a principle of flexibility of information system, a principle of ordering (distribution) of databases, a principle of minimization of number of search actions, a principle of integration of information system and a principle of protection of the information against unauthorized access. The authors also consider in detail in relation to the problems of forensic construction and technical expertise the principles of information system functioning, which include: the principle of combination of stability of information sources and operative systematic replenishment of new information, the principle of operative information supply, the principle of adequacy of information response to experts' enquiries, the principle of advance of information «supply» of information «demand». The structureand content of funds of primary and secondary sources of information support of forensic construction-technical expert examination is alsopresented, as well as the prospects of development of information support system of this type of forensic activities with the use of digital technologies, based on the fact that the results of its functioning must meet the requirements of modern legal proceedings.

Legal bases of automation of Federal Treasury activities in the field of state financial control: problems of using information systems

The strategy of economic security of the Russian Federation for the period up to 2030 defines various directions of ensuring economic security, one of which is to improve the activities of control bodies, including the Federal Treasury, which, in turn, is carried out through the application of various measures, in particular, information, which includes the creation and organization of information systems aimed at automating control activities. The presented research is devoted directly to the analysis of the legal regulation of these information systems. The article discusses the legal foundations of the organization and functioning of information systems specified in the Letter of the Ministry of Finance of the Russian Federation No. 02-10-07/74315, namely the GIS of public Finance management “Electronic Budget”, GIS “Official website of the Russian Federation in the information and telecommunications network “Internet” for posting information on the implementation of state (municipal) financial audit (control) in the field of budgetary legal relations” and GIS “Unified Information System in the field of procurement”. In addition, a study of the legal regulation of systems not mentioned by the Ministry of Finance of the Russian Federation among those contributing to the conduct of state financial control is presented — an automated system for planning control and supervisory activities of the Federal Service for Financial and Budgetary Supervision in executable modules and GIS “Standard cloud solution for automation of control (supervisory) activities”. The impossibility of using the second of these systems when carrying out state financial control measures has been established. In conclusion, the specific directions of the use of the considered information systems in carrying out control measures by the Treasury of Russia are presented.

SECURITY OF CORPORATE INFORMATION IN FINTECH ECOSYSTEM

Background. With the intensification of digitalization processes, the use of FinTech tools by various business entities, which include both financial service offerors and their consumers, is becoming especially important. Analysis of recent researches and publications. The works of many scientists are devoted to the functioning of various aspects of corporate information systems. However, there is currently a lack of research on the feasibility of using financial technology instruments by business entities, their threats and security for corporate information systems. The aim of the article is to study the place of FinTech tools in the corporate information system, identify threats to their use and ensure the security of their operation. Materials and methods. The theoretical and methodological basis of the study are the works of domestic and foreign scientists on the functioning of corporate information systems and FinTech ecosystems. Results. The basis of digital transformation is the use of innovative technologies in the financial services market. This leads to the appropriate transformation of information systems of business entities and ensuring their security. There is an intensification of business use of digital banking services, digital insurance, payment platforms, raising funds through crowdfunding platforms, investing. The FinTech ecosystem within the sectoral approach should be understood as the areas of application of financial technology instruments, the services of which are used by various consumers, in particular, business entities, individuals, public authorities.The increasing digitalization of financial activities of business entities as a result of the Covid-19 pandemic has intensified the creation of additional challenges for corporate information systems for the implementation of cyber risks. Conclusion. The use of financial technology tools by business entities leads to the formation of FinTech ecosystems. Ensuring the security of information systems is the key to corporate stability. The challenge of countering cyber threats is not only for financial service offerors, but also for business entities that are their consumers, as the use of financial technology tools in financial transactions causes risks to all participants in the FinTech ecosystem.