Peculiarities of the Functional Approach to the Management of Information Security of Enterprises in Crisis Conditions

Abstract

The paper identifies the relevance of the problem under study with regard to the development of information security management systems for enterprises and organizations. This issue is of particular importance in the context of economic crisis. With the active development of the latest information and communication technologies, general computerization, information security is becoming a key characteristic of enterprise information systems The problems of using a functional approach in the formation of information security management systems for enterprises in crisis conditions are considered. The essence of the information danger of enterprises in crisis conditions is analyzed. It is proposed that the process of forming an integrated information security management system should be carried out on the basis of a comprehensive functional approach. A conceptual model of enterprise information security management in crisis conditions based on the functional approach is built. This model will help to increase the level of information and economic security of enterprise. This model will help to increase the level of information and economic security of an enterprise. The proposed methodology for building enterprise information security management systems, which is formed on the basis of a functional approach, should provide a reliable level of protection of information and communications of an enterprise. This will be achieved through continuous monitoring of the information environment (threats, dangers, challenges, etc.), constant monitoring of the information and communication activities of an enterprise, forecasting of information security (in particular, the risks that will affect it), etc. The result of the formation and application of the enterprise information security management system based on the functional approach is the formation of a comprehensive, balanced, effective and flexible information security system that will take into account all the features of the application of measures to protect the enterprise from negative information and communication influences, protect information arrays (data), information and intellectual rights, and provide open access to information resources of employees.