Methodological Aspects of the Security of Information Flows of an Enterprise

The methodological basis of the model for the formation of a balanced system of information security at the enterprise was suggested. The relationship among information flows was described and the threats to the information security of the enterprise were defined. The probability of realization of the threats was estimated. The presented model of information security is a set of objective external and internal factors and their impact on the information security at the enterprise including safety of material and information resources. On the whole the methodical approach under consideration allows assessing or overestimating the level of the current state of information security of information flows at the enterprise, to develop recommendations on providing information security of the enterprise and to reduce possible costs of the enterprise by increasing the stability of the system of information flows. The approach also helps to develop the concept and policy of information security of the enterprise and offers protective plans for internal and external information flows which are created at the enterprise and transmitted by different kinds of communication channels protecting information of the enterprise from intentional distortion, unauthorized access, copying or use.