Problems of building an effective policy information security of the enterprise
DOI:
https://doi.org/10.5281/zenodo.4904552Keywords:
information resources, information security, information security policy, information protection, computer technology, software, information security threats, communication channels, information attacks, internet fraudAbstract
The necessity of building an effective information security policy of a modern enterprise is substantiated, the main components of such a policy are highlighted; summarizes the main types of information threats associated with the use of modern computer technology; groups of means of counteraction to threats to information security are systematized; the general characteristic of the basic directions of technical protection of information systems has resulted; the factors on which the organization of effective protection of information system of the modern enterprise depends are analyzed; the list of questions which need to be considered at the construction of a policy of information security is offered; offers a number of recommendations to minimize the risks associated with information security of the enterprise.
Downloads
References
Basic course on information security. Available at: http://cert.gov.ua/pdf/Брошура-CERT-UA-Інформаційна-безпека.pdf (accessed 11.03.2021).
Batiuk, A.Ie. & Dvulit, Z.P. & Obelovska, K.M. & Ohorodnyk, I.M. & Fabri, L.P. (2004). Informatsiini systemy v menedzhmenti [Information systems in management]. Lviv: Natsionalnyi universytet «Lvivska politekhnika», «Intelekt-Zakhid», pp. 343-380.
Khokhlachova, Yu. (2012). Polityka informatsiinoi bezpeky obiekta [Object information security policy]. Pravove, normatyvne ta metrolohichne zabezpechennia systemy zakhystu informatsii v Ukraini: naukovo-tekhnichnyi zbirnyk, 2(24), 23-29.
Kuzmenko, B.V. & Chaikovska, O.A. Zakhyst informatsii. Orhanizatsiino-pravovi zasoby zabezpechennia informatsiinoi bezpeky [Information protection. Organizational and legal means of information security]. Available at: http://itman.at.ua/news/kuzmenko_b_v_chajkovska_o_a_zakhist_informaciji_navchalnij_posibnik_ch_1_organizacijno_pravovi_zasobi_zabezpechennja_informacijnoji/2011-03-25-5 (accessed 26.02.2021).
Lehominova, S.V. (2015). Teoretychni zasady informatsiinoi bezpeky pidpryiemstva [Theoretical principles of information security of the enterprise]. Ekonomika. Menedzhment. Biznes, 3(13), 87-92.
Melnyk, M.O. & Nikityn, H.D. & Mezentseva, K.O. (2017). Analiz pobudovy modeli polityky informatsiinoi bezpeky pidpryiemstva [Analysis of building an information security policy of the enterprise]. Systemy obrobky informatsii, 2(148), 126-128.
Nashynets-Naumova, A.Iu. (2017). Informatsiina bezpeka: pytannia pravovoho rehuliuvannia: monohrafiia [Information security: issues of legal regulation: monograph]. Kyiv: Vydavnychyi dim «Helvetyka», 168 p.
Nashynets-Naumova, A.Iu. (2012). Pytannia zabezpechennia informatsiinoi bezpeky pidpryiemstva [Issues of information security of the enterprise]. Yurydychnyi visnyk, 3(24), 58-62.
Ostapov, S.E. & Yevseiev, S.P. & Korol, O.H. (2013). Tekhnolohii zakhystu informatsii: navchalnyi posibnyk [Information security technologies: a textbook]. Kharkiv: Vydavnytstvo KhNEU, 476 p.
Severyna, S.V. (2016). Informatsiina bezpeka ta metody zakhystu informatsii [Information security and methods of information protection]. Visnyk Zaporizkoho natsionalnoho universytetu, 1(29), 155-161.
Zakharchenko, M.V. & Kononovych, V.H. & Kildishev, V.I. & Holev, D.V. (2011). Informatsiina bezpeka informatsiino-komunikatsiinykh system. Kompleksy zasobiv zakhystu informatsii [Information security of information and communication systems. Complexes of means of information protection]. Odesa: ONAZ im. O.S. Popova, 168 p.
Published
How to Cite
Issue
Section
License
The authors agree with the following conditions:
1. Authors retain copyright and grant the journal right of first publication (Download agreement) with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
2. Authors have the right to complete individual additional agreements for the non-exclusive spreading of the journal’s published version of the work (for example, to post work in the electronic repository of the institution or to publish it as part of a monograph), with the reference to the first publication of the work in this journal.
3. Journal’s politics allows and encourages the placement on the Internet (for example, in the repositories of institutions, personal websites, SSRN, ResearchGate, MPRA, SSOAR, etc.) manuscript of the work by the authors, before and during the process of viewing it by this journal, because it can lead to a productive research discussion and positively affect the efficiency and dynamics of citing the published work (see The Effect of Open Access).
