Article · International Journal of Electronics and Telecommunications · March 15, 2023

Adaptive Monitoring of Companies' Information Security

Valeriy Lakhno, Салтанат Адилжанова, Moldir Ydyryshbayeva, Aliza Turgynbayeva, Olena Kryvoruchko, Віталій ЧУБАЄВСЬКИЙ

Abstract

Additions were proposed to the method of organizing the information security (IS) event management process of companies. Unlike existing solutions, the algorithm of the "Event handling" subprocess was detailed. This detailing is a complex, which includes the IS event processing substage. In addition, the proposed detailing of the "Event Handling" subprocess allows for covering the entire life cycle of an IS event. The performed research allows in practice to fill in potential gaps in information when creating a company's ISMS. An additional advantage of the proposed solution is the possibility of using this sub-process as an independent one. The proposed approach makes it possible to simplify the procedure for managing the information security of a company as a whole, as well as potentially reduce the costs of its construction for small companies and enterprises. Also, this subprocess can be considered as an independent information security management process, for example, for a company's CIS. The proposed solutions and additions, in contrast to similar studies, are characterized by invariance with respect to the methods of implementing the company's IS infrastructure solutions, and in particular its CIS. This ultimately allows, without changing the methodological tools, to scale this approach and adapt it to the ISMS of various companies.

Information and Cyber SecurityCybersecurity and Information SystemsInformation Technology Governance and Strategyinformation security managementismsmall and medium-sized enterprises

Adaptive Monitoring of Companies' Information Security

Abstract

More by Valerii Lakhno