The dynamics of changes in security systems during the development of a company from small to large

DOI: 10.31673/2409-7292.2022.031823

Abstract

The article is devoted to the study of the peculiarities of the company's information security management in the process of its development from small to large. General definitions and theoretical provisions of information security were studied; the current state and trends in the development of ISMS of small, medium and large businesses in Ukraine were investigated; IT support models for small, medium and large companies were developed and sound recommendations for their implementation were given. The results of the research can be used at enterprises and organizations of small, medium and large businesses in the process of solving IS problems, preventing the occurrence of critical errors, incidents and unnecessary costs in the process of growth and development of business from small to large.

Keywords: information security management, information security management system, features of information security management of small, medium and large businesses.

References
1. 2021 Cyber Security Statistics The Ultimate List Of Stats, Data & Trends. URL: https://purplesec.us/resources/cyber-security-statistics (Дата звернення: 19.03.2022)
2. Celia Paulsen Patricia Toth, Small Business Information Security: The Fundamentals. URL:
3. https://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.7621r1.pdf (Дата звернення: 19.04.2022)
4. The most in-demanded Cyber skills for 2022. URL: https://www.infosecurity-magazine.com/blogs/in-demand-cyber-skill-2022 (Дата звернення: 18.06.2022)
5. Free SANS Information Security Resources: https://www.sans.org/security-resources (Дата звернення: 15.05.2022)
6. ISO/IEC 27000:2018 / Information technology – Security techniques – Information security management systems – Overview and vocabulary. 2018. 27 p.
7. ДСТУ ISO/IEC 27032:2016 (ISO/IEC 27032:2012, IDT) Інформаційні технології. Методи захисту. Настанови щодо кібербезпеки [Текст] : ДСТУ (Державний стандарт України) / Технічний комітет зі стандартизації «Інформаційні технології» (ТК 20). ‒ Київ: ДП «УкрНДНЦ», 2018. ‒ 44 с.
8. Мужанова, Т. М. Інформаційна безпека держави [Текст] : Навчальний посібник / Т. М. Мужанова. ‒ Київ: Державний університет телекомунікацій, 2019. ‒ 131 с.
9. Santos, H. M. D. Cybersecurity: A Practical Engineering Approach [Text] : Monograph / H. M. D. Santos. ‒ CRC Press, 2022. ‒ 340 p.
10. Yevseiev, S. Synergy of building cybersecurity systems [Text] : Monograph / S. Yevseiev [et al.]. ‒ Kharkiv: PC TECHNOLOGY CENTER, 2021. – 188 p.
11. James, A. IoT System Design: Project Based Approach [Text] : Monograph / A. James, A. Seth, S. C. Mukhopadhyay. ‒ Springer, 2022. ‒ 291 p.