Conceptual model of enterprise security in the information environment.

Abstract

Characteristic features and signs of the information society are defined in the paper. The information environment, which is considered for the formation of the enterprise security model, is an information society component. The classes of intelligent information technologies (IIT) that are necessary for the interaction of subjects in the information society are highlighted. Complementing each other, the specified IIT classes create conditions for stable access to information and knowledge that are updated. According to their types, goals, and principles, the article defines and characterizes such information environment components as organization, technologies, a digital repository of informational and methodical resources, services, mathematical modeling methods, enterprise security modeling system, and information and telecommunication infrastructure. The internal and external resources of the organization, whose presence affects the formation of the enterprise security model, are determined. Within the framework of the information society, the proposed conceptual model makes it possible to determine the necessary set of services and information resources needed for the formation of the enterprise security model. The paper highlights the following main components of the enterprise security model: security tasks, computer communications, safety equipment, flexibility, and organizational environment. The proposed practical implementation allows accessing information resources, exchanging messages using existing communications, participating in general discussions, searching for information, according to the request, and organizing collective (joint) activities. Based on the organization structure, the offered practical implementation of the model ensures the delimitation of access levels, implements individual protection profiles, and ensures the security of users' data.