INFORMATION PROTECTION MODEL BASED ON INFORMATION SECURITY RISK ASSESSMENT FOR SMALL AND MEDIUM-SIZED BUSINESS
Анотація
This study focuses on the protection of information resources on the basis of risk-oriented approach for small and medium-sized businesses with an emphasis on risk assessment of information security (IS). The analysis of scientific sources allowed to characterize the essence of the risk-oriented approach and to formulate the main provisions for creating a model of information protection based on this technology. The content line of the model focuses on conducting qualitative and quantitative IS risk assessment, namely, SWOT-analysis, statistical method, expert assessment method and Monte Carlo method. The step-by-step procedure of carrying out the stages of analysis and implementation of these methods for IS risk assessment is described. In order to obtain a comprehensive map of IS risks at the initial stage, it is proposed to conduct a SWOT analysis, in particular to identify business weaknesses and external and internal threats. Use a statistical method to quantify IS risk if there are sufficient analytical reports. Otherwise, implement the method of expert assessments. The final step is to generate a script using the Monte Carlo method. To effectively describe the context of each information resource, use the technology of forming multiple pairs "threat - vulnerability". The relevance and possibilities of using this model as a methodology of information for small and medium businesses are substantiated.
Класифікація
Ідентифікатори
Рецензії (0)
Написати рецензіюРецензій ще немає. Будьте першим!
Схожі роботи
СТРАТЕГІЧНЕ УПРАВЛІННЯ РИЗИКАМИ НА ПІДПРИЄМСТВІ: АНАЛІЗ ТА ЗМЕНШЕННЯ НЕГАТИВНИХ ВПЛИВІВ
Схоже за: Business and Economic Development · Banking, Crisis Management, COVID-19 Impact · Economic and Business Development Strategies
Increasing the Effectiveness of State Policy in Ensuring Energy Security and Environmental Protection
Схоже за: Business and Economic Development · Banking, Crisis Management, COVID-19 Impact · Economic and Business Development Strategies
MANAGEMENT OF GEOPOLITICAL RISKS OF ENTERPRISES IN THE TOURISM AND HOSPITALITY INDUSTRY IN UKRAINE
Схоже за: Business and Economic Development · Banking, Crisis Management, COVID-19 Impact · Economic and Business Development Strategies
Integration of ESG principles into the business model of retail enterprises: implications for risk management and economic security
Схоже за: Business and Economic Development · Banking, Crisis Management, COVID-19 Impact · Economic and Business Development Strategies
The role of the formation of the environmental management system in the improvement of international economic relations
Схоже за: Business and Economic Development · Banking, Crisis Management, COVID-19 Impact · Economic and Business Development Strategies
РИЗИК-МЕНЕДЖМЕНТ ГЛОБАЛЬНИХ ЛАНЦЮГІВ ПОСТАВОК: ВРАЗЛИВІСТЬ І СТІЙКІСТЬ У ФОКУСІ СТРАТЕГІЧНОГО УПРАВЛІННЯ В УМОВАХ ГЛОБАЛЬНОЇ НЕВИЗНАЧЕНОСТІ ЕКОНОМІЧНОЇ КОН'ЮНКТУРИ
Схоже за: Business and Economic Development · Banking, Crisis Management, COVID-19 Impact · Economic and Business Development Strategies