Secure Business Processes Research Articles

The Internal Auditors’ Perception of Blockchain Technology Implementation in Companies’ Business Activities

Nowadays, business activities of every company deal with numerous challenges related to various microeconomic, national, and global aspects. Information and communication technologies’ (ICTs’) developments have been crucial in that context, as they disrupt internal business processes, ways of communication, tax services, risk and regulatory functions, and other business aspects. A key game changer new technology, with concrete application in companies, is blockchain technology (BCT). BCT enables automation, acceleration, transparency, traceability, and increased security of numerous business processes. BCT and related disruptions in the ways of working do not bypass internal audit function, as an internal corporate governance monitoring mechanism, either. As a result, contemporary internal auditors must be adaptable, agile, and proactive to be able to audit and consult about BCT enabled companies’ business activities. Thus, the research problem was related to internal auditors’ perception of implementing BCT in their companies’ business activities. Based on the conducted critical literature review, we developed the following research hypothesis: internal auditors who work in a company where BCT is already implemented in its business activities will have a favorable view of the implementation of BCT in the company’s business activities compared to internal auditors whose company does not currently use and have no plans to implement BCT in the following years. To test research hypothesis, survey research was conducted among internal auditors in Croatia. We obtained responses from 77 internal auditors from different sectors. Collected data were analysed by applying multiple regression analysis. Obtained results indicated that there exists a statistically significant relationship between internal auditors’ perception of implementing BCT and companies’ application level of BCT.

Вплив цифрових трансформацій на розвиток сучасного економічного простору: людський капітал, інклюзія, безпека

Digital transformations, encompassing the integration of the latest technologies into all aspects of life, are fundamentally changing the modern economic space. This process has a profound impact on three key aspects: human capital, inclusion, and security. These factors interact in the context of digital change, as their proper management is crucial for sustainable and equitable economic development. That is why the purpose of the presented work is to determine the impact of digital transformations on the development of the modern economic space in the aspects of inclusiveness, security and human capital development. The main methods presented in the study are: method of analysis, method of synthesis, method of generalization, logical method, method of expert evaluation, method of deduction, method of induction, tabular method, graphical method. The main results of the study include the conclusion that digital technologies pose new requirements on skills and knowledge. Modern business models require highly skilled professionals capable of working with big data, artificial intelligence, cybersecurity, and other advanced technologies. This requires significant changes in education and training, as well as ongoing training and retraining of employees. Digital transformation can also exacerbate social and economic inequalities if an equal access to new technologies is not ensured. Different segments of the population may have unequal access to digital resources and opportunities, which can lead to the exclusion of certain groups from economic activity. Digital transformations are accompanied by an increase in cyber threats such as hacker attacks, identity theft, and fraud. This can jeopardize the security of personal data, business processes and national security. Thus, digital transformations have a powerful impact on the development of the modern economic space, changing the dynamics of human capital, inclusion issues, and security aspects. In order to maximize the positive outcomes of digital change and minimize possible negative impacts, comprehensive measures must be taken, covering educational initiatives, support for inclusion, and strengthening cybersecurity. Only through coherent and strategic approaches can equitable and sustainable development be ensured in the face of rapid technological change.

Model transformation and code generation using a secure business process model

Emerging daily, new devices and software-driven advancements pose challenges in software development, including errors, bugs, and evolving requirements. This leads to delays in delivery. Ensuring software security within the Software Development Life Cycle (SDLC) is crucial. To address this, the research focuses on incorporating security aspects early in the SDLC through model transformation. Platform-independent models with security attributes like Integrity, Privacy, Security Audit, non-repudiation, and authentication are generated. A template-based source code generator is utilized to create the structure of the source model. The Secure Business Process Model (SBPM) encompasses Unified Modeling Language (UML) artifacts, such as analysis level classes and sequence diagrams, enriched with security attributes derived from the activity model. Security requirements are linked to elements extracted from the source model, and structural codes with security-enabled members are produced. Automation in software development is inevitable, though not complete, as it plays a vital role in addressing these challenges and improving the security of software applications.

A Study on Assessment of Business Process Modeling Tool with the Application of the Grey Relational Analysis

Business Process Modelling (BPM) plays a crucial role in connecting corporate policies with IT platform implementation to ensure business benefits. By integrating procedure, functional, organizational, and information perspectives with key metrics such as costs, cycle times, and responsibilities, BPM provides a foundation for assessing value chains, activity-based costs, bottlenecks, critical routes, and inefficiencies. In today's business landscape, both management and BPM are increasingly recognized as vital components. To facilitate the integration of modelling partners and BPM technologies, BPM tools have emerged as effective solutions. These tools enable the presentation and operational management of associated models to relevant parties. The Multi-Criteria Decision-Making (MCDM) is used to analyse the data and deriving the results. In the context of Multi-Criteria Decision-Making (MCDM), selecting the most suitable business activity modelling tool among the available options becomes imperative. This study proposes an approach based on the Grey Relational Analysis (GRA) method to assist businesses in making informed decisions and choosing the optimal business policy modelling technology. The objective is to enhance the effectiveness, affordability, and security of the business procedure modelling process. Using GRA analysis, this research ranks a set of BPM tools, namely GDToolkit, JPetriNet, and ADONIS: CE, TimeNet, Jfern, and GreatSPN. The findings reveal the following order: GDToolkit (1st), JPetriNet (2nd), ADONIS: CE (3rd), TimeNet (4th), Jfern (5th), and GreatSPN (6th). The analysis indicates that GDToolkit is the preferred BPM tool, offering the most desirable features, while GreatSPN is considered the least preferred option. Overall, this research demonstrates the effectiveness of employing Grey Relational Analysis as a decision-making tool for selecting appropriate BPM technologies. By utilizing GRA, businesses can make informed choices that lead to more effective, affordable, and secure business process modelling, thereby enhancing their operational efficiency and competitiveness.

THE CONCEPT OF ENSURING THE ECONOMIC SECURITY OF THE BUSINESS PROCESSES OF THE ENTERPRISE

In the context of globalization and integration, the expansion and deepening of market relations creates prerequisites for the formation of social responsibility of business, within which the process of value creation takes place both for the enterprise itself and for its stakeholders, which is a source of ensuring the sustainability of the enterprise and its economic security. The study is aimed at analyzing the existing concepts of ensuring the economic security of the enterprise, substantiating its main elements, as well as developing the economic security theory by focusing on business processes and highlighting key areas of responsibility. The tasks of research are an analysis of existent conceptions of providing of economic security of enterprise, its basic elements, and also justification of the author's concept of providing of economic security of business processes of enterprise that will assist the increase of its social responsibility. Based on the study conducted on the concepts of ensuring economic security of an enterprise, it is determined that the main purpose of its construction is to provide reliable and relevant information for managing the business processes of an enterprise when choosing directions for maintaining its security and sustainable development. The concept of ensuring the economic security of enterprise business processes is substantiated, which is based on the principles of the system-process approach, takes into account the economic interests of enterprise, which should be protected (in terms of economic security) and realized (in terms of process management). The implementation of this concept provides reliable and relevant information for managing the business processes of an enterprise when choosing directions for maintaining its security and sustainable development. The formed conceptual model of ensuring the economic security of the enterprise's business processes is based on modern management tools, taking into account the systemic and process approach, with the aim of ensuring the sustainable functioning and development of the enterprise in the market based on the consistency of its functional components in a dynamic environment.

КОМУНІКАЦІЙНИЙ МЕНЕДЖМЕНТ В СИСТЕМІ УПРАВЛІННЯ БІЗНЕСОМ: РЕАЛІЇ ВОЄННОГО ЧАСУ

The article is devoted to the study of the features and challenges of communication management in the business management system under martial law. Theoretical approaches, practical examples, and the results of an empirical study conducted using surveys and interviews with representatives of enterprises of various industries operating in military conflict zones are analyzed. The article aims to expand scientific knowledge about communication management in extreme situations, as well as to provide recommendations for its effective organization and adaptation. The article may be useful for managers and entrepreneurs who have to face the consequences of martial law. It was emphasized that in today's world, where information spreads at an incredible speed and changes occur at a rapid pace, effective communication management becomes a key element of successful business management. It is indicated that communication management is a systematic approach to the planning, execution and control of communication processes at the enterprise, aimed at achieving the set goals and objectives. It is indicated that communication management is an important component of successful business management, as it affects the formation of the image, reputation, competitiveness and stability of the enterprise. It is emphasized that wartime requires a high level of flexibility and adaptability in management processes. It was found that in the conditions of martial law, communication management acquires special importance, as it requires adaptation to the changing environment, preservation of the reputation and loyalty of customers, employees and partners, ensuring the efficiency and security of business processes, preventing and overcoming crisis situations. The role of communications is growing in the global world and determines the development strategies of organizations. Communication is the most important element of the knowledge management system and the connecting link in the structure of the enterprise. It is noted that business management is not limited to finance and strategic planning. It was concluded that effective communication management allows enterprises to ensure mutual understanding and cooperation within the organization and on the external market.

THE DIFFERENCE BETWEEN CYBER SECURITY VS INFORMATION SECURITY

The terms cyber security and information security are often used interchangeably, both in the academic literature and by organizations. This article aimed to identify whether these terms can be used interchangeably, analyzing the differences between the terms, based on several definitions identified in scientific articles and books, as well as definitions presented by specialized organizations. The analysis consists in determining the keywords, that define the terms, based on which conclusions were made. It has been determined that information security places a strong emphasis on the protection of information, cyber security refers to all assets that are part of cyberspace, such as end devices (including IoT), network devices, communication media and information. Cybersecurity is an umbrella term that includes: electronic communications network and computer security, physical security, infrastructure security, personnel security, hardware and application security, business process security. Through the identified results, important contributions are made both for the academic environment, as well as for governmental and non-governmental organizations, for the understanding and correct use of terms, to reduce uncertainty and to correctly approach specialist terminology, because the field of security is increasingly important, the challenges are complex and diverse.

Designing secure business processes for blockchains with SecBPMN2BC

Collaborative business processes can be seen as smart contracts, as they are oftentimes adopted to express agreements among different organizations. Indeed, they provide mechanisms to formalize the obligations of each involved party. For instance, collaborative business processes can specify when a certain task should be executed, under which conditions a service should be offered to the other participants, and how physical objects and information should be manipulated. In this setting, to prevent misuse of smart contracts and services and information provided, it is paramount to guarantee by design that security requirements are fulfilled. With the rise in popularity of blockchains, several approaches exploiting the trusted smart contract execution environment offered by this technology to enforce collaborative business processes have been proposed. Yet, the complexity of business processes, security requirements, and blockchain applications calls for an engineering approach that guides the design of secure business processes. Such an approach should both take advantage of the possibilities offered by blockchain technology to enforce some security requirements (e.g., non-repudiation), and take into account the limitations blockchain poses for other security requirements (e.g., confidentiality). However, we are not aware of any existing work that aims at addressing such issues following a similar approach.In this article, we propose SecBPMN2BC: a model-driven approach to designing business processes with security requirements that are meant to be deployed on blockchains. SecBPMN2BC consists of: (i) an extension of BPMN 2.0 that allows designing secure smart contracts; (ii) a set of algorithms and their implementation that check incompatible security requirements and help the design of smart contracts; (iii) a workflow that guides the application of the method. The method has been validated with a survey conducted on security and BPMN experts.

A Detection Method for Abnormal Transactions in E-Commerce Based on Extended Data Flow Conformance Checking

With the development of smart devices and mobile communication technologies, e-commerce has spread over all aspects of life. Abnormal transaction detection is important in e-commerce since abnormal transactions can result in large losses. Additionally, integrating data flow and control flow is important in the research of process modeling and data analysis since it plays an important role in the correctness and security of business processes. This paper proposes a novel method of detecting abnormal transactions via an integration model of data and control flows. Our model, called Extended Data Petri net (DPNE), integrates the data interaction and behavior of the whole process from the user logging into the e-commerce platform to the end of the payment, which also covers the mobile transaction process. We analyse the structure of the model, design the anomaly detection algorithm of relevant data, and illustrate the rationality and effectiveness of the whole system model. Through a case study, it is proved that each part of the system can respond well, and the system can judge each activity of every mobile transaction. Finally, the anomaly detection results are obtained by some comprehensive analysis.

Business Intelligence a potrzeby Just Culture. Analiza możliwości współdziałania wysoko zaawansowanych technologii i potrzeb organizacji gospodarczych

Purpose – The aim of the publication is to present the principles of security of business processes at airports – Just Culture and the transplantation of these principles into process -oriented business environments of enterprises with the use of Business Intelligence. Research method – By the method of comparisons and references of the priority importance of the security of airport business processes for the ability of these entities to function in relation to the essence of the security of business processes of enterprises in their industries, the authors showed areas for new qualitative applications of Just Culture in non -airport organizations conditioned by Business Intelligence applications.Results – According to the authors, the priority of the safety of airport operations, which subordinates all processes of these commercial organizations and international ci vil aviation, may be in the conditions of dynamically growing uncertainty in the functioning of enterprises, a breakthrough inspiration for commercial entities from other industries in the field of security protection implemented through economic processes. The essence of the issue is important for management practitioners. The perspective of Just Culture’s attitude to the economic use of employees’ knowledge resources, innovative for this environment, extends this spectrum with the ability to use them to strengthen and increase the implementation of security and reliability of the company’s business processes under the condition of unconventional use of the knowledge resources of the employee capital. Originality / value / implications / recommendations – The analogy method of examining the breakthrough impact of the Internet on the dynamics of the development of entre-preneurship and world economies, made available to business by the military, initially the sole user of this information technology, the authors see the possibilities of strengthening the security of business processes of economic organizations by adapting rules that Just Culture used exclusively in the aviation industry to their process structure.

Cyber (In)security of Personal Data and Information in Times of Digitization

In an employment relationship, work and pay are no longer the only important aspects, as importance is increasingly shifting toward obligations concerning the protection of personal data and privacy arising from the prohibition of causing harm to the employer and the duty of loyalty to the employer. The article deals with the constitutionally protected right to privacy and the protection of personal data from the point of view of ensuring cyber security at the employer. The employer is obligated to protect the right to privacy by legal provisions, whereas from the point of view of ensuring the protection of privacy and information, the employer must protect, first and foremost, the personal data of employees. The main purpose of the legal protection of personal data is the lawful and fair processing of the personal data of individuals. Employers are thus facing an increasing number of risks related to the safety of employees and the security of business processes, and it is therefore important to establish comprehensive corporate security to ensure adequate security across all levels.

DEVELOPMENT OF RECOMMENDATIONS FOR REDUCING CYBER THREATS DURING REMOTE WORK FROM THE POINT OF VIEW OF CYBER SECURITY

For several years in a row, Ukrainian organizations (first due to the Covid-19 pandemic and its consequences, and now military operations) and in general the world, have been forcibly transferring employees to a more optimal work format - this is remote work (work at home). According to statistics, this practice has shown its positive side in terms of higher labor productivity (less time spent on moving around the city, comfortable home conditions, etc.), however, from the point of view of cyber security, there has been an increase in cases of cyber threats (hereinafter - cyber threats) and the activation of cyber criminals. Remote work mode means full or partial transition to the use of personal devices by employees. Setting up remote work of employees requires a clear preparation of information systems within the organization, therefore information security (hereinafter - IS) and information technology (hereinafter - IT) services must ensure the security and continuity of the organization's business processes. Because remote work is associated with a high risk of cyber threats and the intervention of cybercriminals. Cybernetic threats (cyberthreats) are existing and/or potentially possible phenomena and factors that pose a danger to the vital interests of a person and citizen, society and the state, the implementation of which depends on the proper functioning of information, telecommunication, and information-telecommunication systems [1]. The formation and effective implementation of cyber security, within the framework of which a set of recommendations and measures for predicting and countering cyber threats is developed, is a necessary condition for the safe and continuous functioning of the organization.

Application of facial recognition technology to prevent insider attacks

The article discusses the types of biometric authentication to prevent insider attacks, their comparative analysis. There are various methods of determining insider activity. Today, Data Leak Prevention (DLP) systems, which are used to prevent the leakage of confidential information from the information system, are widespread. However, these software complexes do not allow detecting a potential attacker at an early stage, as well as monitoring the connection of users, since a tight connection is formed between users and computers with access rights of their level. Biometric innovations are a solution that allows providing a sufficient level of security, user convenience and optimization of business processes. Among the main types of biometric authentication methods, static methods of human biometrics have become the most widespread. These include identification based on the papillary pattern on the fingers, the iris and retina of the eye, the pattern of hand veins, the geometry of the hands, and the face. The family of methods using dynamic characteristics include: voice identification, handwriting dynamics, heart rate, and gait. Biometric technologies consist in measuring and using unique physical or behavioral traits of people to distinguish them from each other. Biometric recognition forms a strong connection between a person and his personality as a biometric feature. It cannot be separated from a person, lost or duplicated. So, biometric recognition is a protection method more resistant to social engineering attacks compared to conservative recognition methods (passwords, tokens, etc.).Also the approach to identification of human faces and description of the system of their recognition working in a mode close to real time which allows to trace a subject’s head, and then distinguishes it, comparing initial features of a face with earlier recognized is offered.

Теоретичне підґрунтя управління фінансово-економічною безпекою бізнес-процесів підприємства

The article presents the theoretical provision of the management of financial-economic security of business processes of enterprise from the standpoint of the conception of security-oriented development, resource-based and process approaches. The resource-based approach is considered traditional in world practice, where the financial-economic security of enterprise is considered as a state of efficient use of the resources of a business entity to prevent threats and destabilizing factors. The results of these studies create a methodological basis for building a system for managing the financial-economic security of enterprise, which forms a managerial response to certain risks and threats due to specific functions and analysis, accounting, diagnostics. A comprehensive study of the state of economic security of an enterprise is impossible without taking into account the provisions and principles of the process approach – distinguishing the characteristics of the financial-economic security of business processes, localized assessment of their levels and the impact on current financial-economic results, the implementation of strategic goals. The financial-economic security of business processes is ensured by the formation of such properties of business processes as: financial-economic stability; organizational adaptability; functional efficiency; innovative activity; managerial competence. The solution of these problems is impossible without the use of a strategic instrumentarium for managing the financial-economic security of business processes of enterprise development. According to the results of the analysis of studies of the characteristics of types of business processes, the criteria for the financial-economic security of business processes of enterprise are defined.

Cloud-Based Business Process Security Risk Management: A Systematic Review, Taxonomy, and Future Directions

Despite the attractive benefits of cloud-based business processes, security issues, cloud attacks, and privacy are some of the challenges that prevent many organizations from using this technology. This review seeks to know the level of integration of security risk management process at each phase of the Business Process Life Cycle (BPLC) for securing cloud-based business processes; usage of an existing risk analysis technique as the basis of risk assessment model, usage of security risk standard, and the classification of cloud security risks in a cloud-based business process. In light of these objectives, this study presented an exhaustive review of the current state-of-the-art methodology for managing cloud-based business process security risk. Eleven electronic databases (ACM, IEEE, Science Direct, Google Scholar, Springer, Wiley, Taylor and Francis, IEEE cloud computing Conference, ICSE conference, COMPSAC conference, ICCSA conference, Computer Standards and Interfaces Journal) were used for the selected publications. A total of 1243 articles were found. After using the selection criteria, 93 articles were selected, while 17 articles were found eligible for in-depth evaluation. For the results of the business process lifecycle evaluation, 17% of the approaches integrated security risk management into one of the phases of the business process, while others did not. For the influence of the results of the domain assessment of risk management, three key indicators (domain applicability, use of existing risk management techniques, and integration of risk standards) were used to substantiate our findings. The evaluation result of domain applicability showed that 53% of the approaches had been testing run in real-time, thereby making these works reusable. The result of the usage of existing risk analysis showed that 52.9% of the authors implemented their work using existing risk analysis techniques while 29.4% of the authors partially integrated security risk standards into their work. Based on these findings and results, security risk management, the usage of existing security risk management techniques, and security risk standards should be integrated with business process phases to protect against security issues in cloud services.

Obtaining secure business process models from an enterprise architecture considering security requirements

PurposeSecurity requirements play an important role in software development. These can be specified both in enterprise architecture models and in business processes. Enterprises increasingly carry out larger amounts of business processes where security plays a major role. Business processes including security can be automatically obtained from enterprise architecture models by applying a model-driven architecture approach, through a CIM to CIM transformation. The aim of this article is to present the specification of transformation rules for the correspondence between enterprise architecture and business process model elements focusing on security.Design/methodology/approachThis work utilizes motivational aspects of the ArchiMate language to model security in the business layer of enterprise architectures. Next, a set of transformation rules defined with the Atlas Transformation Language are utilized to obtain the correspondence of the enterprise architecture elements in a business process, modelled with a security extension of BPMN.FindingsA total of 19 transformation rules have been defined. These rules are more complex than element to element relations, as they take into consideration the context of the elements for establishing the correspondence. Additionally, the prototype of a tool that allows the automatic transformation between both models has been developed.Originality/valueThe results of this work demonstrate the possibility to tackle complex transformations between both models, as previous literature focuses on semantic correspondences. Moreover, the obtained models can be of use for software developers applying the model-driven approach.

MODELLING THE SECURITY OF BUSINESS PROCESSES WHEN CREATING AND TRANSFERRING VALUES FOR STAKEHOLDERS

Abstract.The purposeof the recent study is to substantiate the directions and develop a methodological approach to modelling the security of business processes by their main types, considering the interests of stakeholders who receive value from interaction with the business.Business as an economic system is based on the significant number of transactions that can lead to different financial, material, informational losses, as well as reputational risks due to the lack of stakeholders’ trust. To prevent these losses when creating and transferring values for stakeholders we suggested the approach to modelling the security of business processes which takes into account their main types (main, auxiliary, managerial business processes and business development processes), the results (value created) that key stakeholders get at the output of these processes, and the indicators that reflect the criteria for modelling the security of business processes — efficiency, effectiveness, and quality (customer satisfaction with the result of the process — the recipient of value). Using the fuzzy set method, a map of identification of the security status of basic, auxiliary, managerial business processes and business development processes was developed, which allows to use a wide range of characteristics of business processes and linguistic variables to describe them (from «catastrophic» state to «very good») and allows you to model options for changing the strategy of the enterprise in order to avoid the risk of imbalance of economic, social and environmental interests of its stakeholders. The proposed approach was applied to retail chains in Ukraine and provided decision-makers with useful information for a better contribution of internal control systems to creating stakeholders’ value. Keywords: business process, modelling, security of business processes, security criteria, stakeholders, interests, values. JEL Classification D46, G32, L81 Formulas: 3; fig.: 2; tabl.: 5; bibl.: 20.

STRATEGIES FOR ENSURING ECONOMIC SECURITY OF BUSINESS PROCESSES OF THE ENTERPRISE

The article provides a critical analysis of existing approaches to the development of economic security strategy of the enterprise and its business processes, the implementation of which is of great practical importance in ensuring its effective operation in the current period and sustainable development in the future. The strategic approach in managing the economic security of the enterprise allows monitoring the impact of negative factors on the business processes of the enterprise, develop preventive measures to eliminate or prevent their impact, increase awareness and certainty of their condition in the future, ensure manageability and effectiveness of changes and goals. enterprises. The aim of the study is to develop methodological approaches to the formation of strategies for economic security of business processes of enterprises. It is proved that the economic security of business processes is determined by the security of business processes taking into account their level of maturity, consistency of economic interests of stakeholders with existing potential and stated goals, which contributes to the development of a conceptual approach to economic strategy them. The author's approach to the development of economic security strategy of business processes of the enterprise depending on the security zone (from the highest level of danger to the highest level of security) and types of strategies of its economic security (survival, stabilization, support, limited growth, growth, sustainable development) are substantiated. This methodical approach to the formation of the strategy of economic security of business processes of the enterprise allowed to establish its components and relationships between them, and to develop a set of measures to ensure economic security of business processes of the enterprise. It is concluded that the proposed methodological approach is the basis for economic security of business processes, taking into account both the state and direction of development of the enterprise, has practical significance in the current and strategic periods and minimizes the impact of negative factors, increase certainty , to provide controllability and efficiency of changes and achievement of the purposes of the enterprise.

СУТНІСТЬ ТЕХНОЛОГІЇ БЛОКЧЕЙН ТА ЇЇ ЗАСТОСУВАННЯ У ФІНАНСОВІЙ СФЕРІ

The constant demand of society to improve the speed and security of business processes is the driving force behind the emergence of new technologies and solutions, one of which is the blockchain. The article provides a theoretical substantiation of the essence of blockchain technology as an economic category. The object and subjects of the blockchain are defined, its inherent functions and principles are formed. The article also proposes an approach to the classification of blockchain types, all this allows a comprehensive approach to the study of the process of using blockchain technology in the financial sphere. The paper describes and reveals the blockchain process step by step. The process is described in a universal way, suitable for working with any projects based on a distributed database. The article provides examples of the use of blockchain technology in various areas of financial activity. In the banking sector, blockchain can improve the security and speed of domestic and international payments, and such payments will also be practically free for the parties. In insurance, the introduction of blockchain technology will help companies instantly exchange customer data, and the use of smart contracts will speed up the work with insurance policies. Thanks to the blockchain in accounting, information about transactions, contracts, etc. will be recorded in the general register in real time, so the verification of compliance with legal norms will occur automatically. This will significantly increase the operational efficiency of organizations. The use of blockchain in audit will make this process more transparent, and the time of its implementation will be significantly reduced due to reliable and up-to-date accounting records between counterparties. In the securities market, the blockchain will digitize securities, which will increase their liquidity, as well as help to better comply with the law, and will allow flexible transfer and accounting of ownership of such assets. In working with smart contracts, thanks to the code running on the blockchain, the contract can be executed automatically. At the end of the article, the conclusions are formed and the forecast of the development of the blockchain market for the coming years is given.

ОСОБЛИВОСТІ ФОРМУВАННЯ МЕТОДИЧНОГО ІНСТРУМЕНТАРІЮ ОЦІНКИ ЕКОНОМІЧНОЇ БЕЗПЕКИ БІЗНЕС-ПРОЦЕСІВ ТОРГОВЕЛЬНИХ ПІДПРИЄМСТВ

In unstable market conditions and a tough competitive environment, economic security diagnostics is an important tool for identifying reserves and opportunities to increase the efficiency of trading enterprises. A reliable assessment of the economic condition of a trade enterprise is crucial for forming correct conclusions and making adequate management decisions. The purpose of the article is to generalize the methodological tools for assessing the economic security of business processes of commercial enterprises and identify the features of its practical application. The article analyzes the existing methodological approaches to assessing the level of economic security of an enterprise. Assessment of the level of economic security is not identical to estimation of level of economic safety of business processes of the enterprise, so the author’s approach to the assessment of economic security of business processes of a trade enterprise. A cost-based approach to a comprehensive assessment of the level of economic security of business processes of a trade enterprise is justified. In addition, the assessment of the level of economic security of business processes of trade enterprises, in our opinion, should be carried out at certain stages, which are characterized by complexity, consistency, the use of tools for making calculations, taking into account the influence of internal and external factors. In the article the indicators for assessing business processes from a position of ensuring economic security of commercial enterprises, the analysis of which will allow to assess the state of enterprise economic security and its potential development. These indicators influence or as stimulants, increasing which enhances the security level of an enterprise, or as destimulation, the growth of which leads to a decrease in its level. The author’s model of assessing the economic security of business processes of a trade enterprise is unified and complex and allows you to thoroughly, taking into account the complexity of the hierarchical system of economic security, to make calculations and make effective management decisions to ensure the economic security of the enterprise.