ORGANIZATIONAL AND LEGAL WAYS OF DETERMINING THE MAIN DYSFUNCTIONS OF THE CONCEPTUAL MODEL OF INFORMATION SECURITY OF ENTREPRENEURSHIP

Abstract

The identification of the sources of threats to enterprise security information shows that such threats are not realized on their own, but through dysfunctions (disadvantages) in the enterprise, which leads to a breach of the integrity of the information security model of a particular enterprise. Possible dysfunctions of the information security model of an enterprise are defined and specified during the procedure for evaluating the activity of the information security and vulnerability analysis. Such an analysis is implemented at the level of a separate mechanism of protection, which enables one to determine the ability of the appropriate security model to withstand identified threats. Depending on the potential threat, the strength of the protection and response functions is also determined. The basis for determining the threat potential should be an analysis of its capabilities, resources and motives. Therefore, the general organizational and legal directions of defining and neutralizing dysfunctions of the model of information security of entrepreneurship should include the introduction of certain procedures that need to be applied in one or another threat situation. Regulation of actions of subjects of these procedures should be defined in the administrative-legal documents of the enterprise.