scholarly journals INFORMATION SECURITY AUDIT OF AN OPTOELECTRONIC DEVICE ENGINEERING ENTERPRISE

2020 ◽  
Vol 6 (2) ◽  
pp. 146-151
Author(s):  
Muratzhan B. Shakirov ◽  
Igor N. Karmanov
Keyword(s):  
Information Security ◽  
Development Strategy ◽  
Business Processes ◽  
Objective Assessment ◽  
Optoelectronic Device ◽  
Security Audit ◽  
Global Trend ◽  
Organization's Information Security ◽  
Enterprise Security ◽  
State Enterprises

Automated systems play a key role in supporting business processes of commercial and state enterprises. The widespread use of automated information systems for storing, processing and transmitting information makes the issues of their protection relevant, especially given the global trend towards an increase in the number of information attacks, leading to significant financial and material losses. The article demonstrates the importance of conducting an audit in the field of information security of optoelectronic instrumentation. The article discusses the stages and rules of conducting an information security audit, as well as the criteria for evaluating its results. Information security audit is one of the most efficient tools for obtaining an independent and objective assessment of the current level of enterprise security from information security threats. In addition, the audit results provide the basis for forming a development strategy for the organization’s information security system.

scholarly journals MODERN TOOLS FOR INFORMATION SECURITY SYSTEMS

2021 ◽  
Vol 335 (1) ◽  
pp. 14-18
Author(s):  
N. Baisholan ◽  
K.E. Kubayev ◽  
T.S. Baisholanov
Keyword(s):  
Information System ◽  
Risk Management ◽  
Information Systems ◽  
Information Security ◽  
Information Technologies ◽  
Business Processes ◽  
Security Audit ◽  
Security Systems ◽  
Security Models ◽  
Methods And Techniques

Efficiency of business processes in modern organizations depends on the capabilities of applied information technologies. The article describes and analyzes the role and features of audit tools and other methodological tools and models in ensuring the quality and security of information systems. The standard’s principles are reviewed, as well as the importance of meeting business needs. In order to protect virtual values in a company’s system environment, the importance of using information security models is revealed. Practical proposals in risk management and information security in information technology are analyzed through the COBIT standard. Measures for protecting the information system of an organization from accidental, deliberate or fake threats are considered. The possibility of using one of the real information security models by the information recipient or provider in accordance with the requirements of external processes is reported. Furthermore, in connection with increase in the number of attack methods and techniques and development of their new tools and vectors, the need to improve and ways to ensure information security are being considered. The essential tasks of security audit are considered, and the stages of their implementation are described. With regard to security of information systems, an analytical model is proposed for determining vulnerability’s numerical value.

scholarly journals Methodology for Assessing the Risks of Information Enterprise Security Using Case Technologies

2021 ◽  
Vol 25 (5) ◽  
pp. 41-49
Author(s):  
А. V. Gavrilov ◽  
V. A. Sizov ◽  
E. V. Yaroshenko
Keyword(s):  
Information Security ◽  
Business Processes ◽  
Educational Process ◽  
Security System ◽  
Security Measures ◽  
It Industry ◽  
Enterprise Information ◽  
Information Assets ◽  
Value Determination ◽  
Enterprise Security

Purpose of the study. Creating an effective information security system of an enterprise is impossible without an adequate assessment of the risks to which its assets are exposed. The results of such an assessment should become the basis for making decisions in the field of information security of the enterprise. Identification of information assets and assessment of their value, determination of the level of threats to the security of assets allow planning measures to create an enterprise information security system.This paper discusses a methodology for assessing the risks of information security of an enterprise, a distinctive feature and novelty of which is the use of modern tools and methods for constructing and analyzing business processes in order to identify the information assets of an enterprise to be protected.Materials and methods. It is proposed to identify information assets based on the model of business processes of the enterprise, performed using the IDEF0 methodology. Modeling of business processes was carried out in the Business Studio environment of the “Modern Management Technologies” company.The activity of a typical IT-industry company was considered as an example for the risk analysis.Results. The methodology for assessing the risks of information security of an enterprise described in the article has been successfully tested in the educational process. Its use in conducting laboratory classes in the discipline “Designing the information security system of enterprises and organizations” for masters studying in the direction of “Information security” allowed, according to the authors of the article, to increase the effectiveness of the formation of students’ professional competencies.Conclusion. The paper proposes a methodology for assessing information security risks for objects of an enterprise’s information infrastructure, which makes it possible to identify priority areas of information security at an enterprise. As a result of the application of the technique, a loss matrix is formed, showing the problem areas in the organization of information protection, which should be given priority attention when planning information security measures. Based on the data obtained, it is possible to form an economically justified strategy and tactics for the development of an enterprise information security system.

scholarly journals MODERN TOOLS FOR INFORMATION SECURITY SYSTEMS

2021 ◽  
Vol 335 (1) ◽  
pp. 14-18
Author(s):  
N. Baisholan ◽  
K.E. Kubayev ◽  
T.S. Baisholanov
Keyword(s):  
Information System ◽  
Risk Management ◽  
Information Systems ◽  
Information Security ◽  
Information Technologies ◽  
Business Processes ◽  
Security Audit ◽  
Security Systems ◽  
Security Models ◽  
Methods And Techniques

Efficiency of business processes in modern organizations depends on the capabilities of applied information technologies. The article describes and analyzes the role and features of audit tools and other methodological tools and models in ensuring the quality and security of information systems. The standard’s principles are reviewed, as well as the importance of meeting business needs. In order to protect virtual values in a company’s system environment, the importance of using information security models is revealed. Practical proposals in risk management and information security in information technology are analyzed through the COBIT standard. Measures for protecting the information system of an organization from accidental, deliberate or fake threats are considered. The possibility of using one of the real information security models by the information recipient or provider in accordance with the requirements of external processes is reported. Furthermore, in connection with increase in the number of attack methods and techniques and development of their new tools and vectors, the need to improve and ways to ensure information security are being considered. The essential tasks of security audit are considered, and the stages of their implementation are described. With regard to security of information systems, an analytical model is proposed for determining vulnerability’s numerical value.

Determination of the weight of audit evidence by the method of point ratings in the information security audit

2020 ◽  
Vol 7 (1) ◽  
pp. 57-62
Author(s):  
Vladislav A. Voevodin ◽  
◽  
Maria S. Markina ◽  
Pavel V. Markin ◽  
◽  
...  
Keyword(s):  
Information Security ◽  
Security Audit ◽  
Audit Evidence

Lessons learned in intellectual capital management in Germany between 2000 and 2020 – History, applications, outlook

2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Manfred Bornemann ◽  
Kay Alwert ◽  
Markus Will
Keyword(s):  
Development Strategy ◽  
Intellectual Capital ◽  
Business Models ◽  
Business Processes ◽  
Lessons Learned ◽  
Strategy Development ◽  
Management Approach ◽  
Content Type ◽  
Over Time ◽  
Made In

PurposeThis article reports on the background, the conceptual ideas and the lessons learned from over more than 20 years of IC Statements and Management with a country focus on Germany and some international developments. It calls for an integrated management approach for IC and offers case study evidence on how to accomplish this quest.Design/methodology/approachReport on the German initiative “Intellectual Capital Statement made in Germany” (ICS m.i.G.). A brief review of the literature describes the background and theoretical foundation of the German IC method. A short description of the method is followed by four detailed case studies to illustrate long-term impact of IC management in very different organizations. A discussion of Lessons Learned from more than 200 implementations and an outlook on current and future developments finalizes the article.FindingsIC Statements made in Germany (ICS m.i.G.) was successful in providing a framework to systematically identify IC, evaluate the status quo of IC relative to the strategic requirements, visualize interdependencies of IC, business processes and business results as well as to connect IC reporting with internal management routines and external communication. However, ICS is not an insulated method but delivers the maximum benefit when integrated with strategy development, strategy implementation, business process optimization accompanied by change management routines. Strong ties to human resource management, information technology departments, quality management, research and development teams as well as business operations as the core of an organization help to yield the most for ICS m.i.G. Over time, the focus of managing IC changes and maturity leads to deutero learning.Practical implicationsICS m.i.G. proved easy to apply, cost efficient for SMEs, larger corporations and networks. It helps to better accomplish their objectives and to adjust their business models. The guidelines in German and English as well as a software application released were downloaded more than 100,000 times. A certification process based on a three-tier training module is available and was successfully completed by more than 400 practitioners. ICS m.i.G. is supporting current standards of knowledge management, such as ISO 9001, ISO 30401 or DIN SPEC PAS 91443 and therefore will most likely have a continuing impact on knowledge-based value creation.Originality/valueThis paper reports lessons learned from the country-wide IC initiative in Germany over the last 20 years initiated and supported by the authors. Several elements of the method have been published over time, but so far no comprehensive view on Lessons Learned had been published.

scholarly journals Analysis of Information Technology Security Management UKSW SIASAT Using ISO/IEC 27001:2013

2021 ◽  
Vol 5 (2) ◽  
pp. 68
Author(s):  
Andeka Rocky Tanaamah ◽  
Friska Juliana Indira
Keyword(s):  
Information Security ◽  
Business Processes ◽  
Security Management ◽  
Standard Operating Procedure ◽  
Job Descriptions ◽  
Christian University ◽  
Academic Administration ◽  
Access Rights ◽  
Academic Information ◽  
Iec 27001

IT security management is essential for organizations to notice the occurring risks and opportunities because they will profoundly affect the ongoing business processes within the organization. The Satya Wacana Academic Information System, more often called SIASAT, is an IT component playing an essential role in running core business processes at Satya Wacana Christian University under the control of the Information Systems and Technology Bureau. At this time, the implementation of SIASAT has been going well, but there are still some obstacles. Lack of human resources is one of the findings and one it becomes of the most significant risks as it affects the use of infrastructure and information security. This research was conducted using the international standard ISO/IEC 27001:2013, prioritizing information security by taking a planning clause focusing on risk assessment. From the results of this study, there were nine recommendations given. Some of which were the most important, i.e., creating separated standard operating procedure documents for SIASAT, which previously were still affiliated with the Academic Administration Bureau; distributing job descriptions; and providing clear and documented access rights for everyone. It is expected that this research can reduce the occurring risks and can be considered for establishing improvements to enhance academic services in the future.

scholarly journals ISSUES OF AUTOMATION OF THE AUDIT IN ACCORDANCE WITH GOST R 57580.2-2018

2021 ◽  
Vol 6 ◽  
pp. 268-275
Author(s):  
Anastasia V. Sitskaya ◽  
Valeria A. Tabakaeva ◽  
Valentin V. Selifanov
Keyword(s):  
Information Security ◽  
Financial Market ◽  
Quantitative Assessment ◽  
Modern World ◽  
Security Audit ◽  
Huge Amount ◽  
Timely Manner ◽  
Qualitative And Quantitative ◽  
Entire Country ◽  
Individual Client

The modern world can be characterized by a huge amount of information and computerization of all spheres of human activity. But one of the most valuable information can be considered the information that concerns financial organizations. There are incidents of information security in financial organizations that can lead not only to the violation of the interests of an individual client, but also to the crisis of the financial market of the entire country. Information security audit allows you to detect violations in the organization's information system in a timely manner, which significantly increases the security of information. Often, timely and rapid receipt of a qualitative and quantitative assessment of the level of security allows you to avoid an incident. To improve the accuracy of estimates and reduce the time of their receipt, the application "Audit57580" was developed, the relevance of which is discussed in detail in the article.

Sign in / Sign up

Export Citation Format

Share Document