INFORMATION SECURITY OF THE ENTERPRISE: CONCEPTUAL FRAMEWORK FOR EFFECTIVE INFORMATION PROTECTION

Abstract

The article discloses the issue of information protection in the enterprise management system. The development of digital technologies, which contributes to the efficiency of creating, receiving and transmitting information, in the process of using electronic document flow, information networks, forming a database, using online transactions, storing data in cloud storage, etc., greatly complicates the process of protecting information, and therefore arises the need to implement appropriate information security measures. In the course of the study, the concepts of commercial secrets and confidential information at the legislative level were considered, problematic aspects were identified regarding regulatory and legal support and regulation of relations in the field of confidential information, its proper protection and actions in case of violation of the legal regime. The necessity and expediency of applying the information security procedure for the proper protection and preservation of its integrity, usefulness and relevance are substantiated. The main components of the information security model are identified, in particular, sources of threats and their possible threatening impact (external and internal), objects of threats (data, databases, information), as well as the division of information into categories (public and restricted) as part of information protection. The author characterizes the types of information protection at the documentary and technical levels, summarizes the measures and actions required to implement an appropriate protection system. Various methods and tools for improving the information security system, their relationship with information sources and information managers (owners) are investigated. Implementing a reliable information security system and protecting credentials should be a priority in the effective management of an enterprise; monitoring and analyzing the emergence of new threats, preventing them and finding ways to minimize them requires constant improvement and research, but will help to preserve important information.