Economic Aspects of Analysis of Occurrence of Incidential Events on the Scope of Security of Information in a Production Enterprise

Abstract

Abstract This article presents structure and analysis of possible events for information security of a production company. The aim of the analysis is to identify incident events, their time and frequency. The analysis includes occurrence of notifications, threatening events, employee errors and false alarms. Also, the conducted research takes into account the functions performed in the enterprise. For these events, a daily distribution of events and statistical analysis of their occurrence were developed. Thanks to the analysis of the phenomena in time, enterprises can introduce actions preventing the occurrence of incidents. The conducted research has shown that employees report incidents which, in their opinion, constitute an incident, which greatly facilitates the work of the information security administrator. These events are analyzed and classified accordingly. The analysis showed that most events take place between midnight and two in the morning. The conducted analysis is a pilot study carried out in one large enterprise in the metallurgical industry.