PRINCIPLES OF FORMATION OF ENTERPRISE INFORMATION SECURITY

The article defines the key principles of formation of enterprise information security. It has been established that an important aspect of studying information security management systems is to determine their importance for the modern understanding of information security and the implementation of basic business processes. It has been established that the purpose of information protection is to preserve the value of information assets for their owners. It has been established that it is advisable to consider the enterprise information security system as a model for conducting information warfare under the influence of internal and external environmental factors. It was found that the main goal of the information security system is to ensure the sustainable development of enterprises, prevent security threats, protect legitimate interests from illegal violations, prevent disclosure of information, loss, leakage, falsification and destruction, as well as ensure the effective operation of all structural divisions of enterprises. The main factors for ensuring information security in modern enterprises are identified. It has been established that the information security of enterprises must be ensured through the implementation of relevant doctrines, strategies, concepts and programs relating to the national information policy of Ukraine, through the implementation of a comprehensive national program in accordance with the Constitution of Ukraine and current laws and norms of international law. It has been determined that the main goal of any enterprise information system is to ensure the uninterrupted operation of the enterprise, avoid security threats, protect the enterprise from potential threats, prevent financial losses, as well as disclose, store, create, destroy and deliver false information. The article highlights the tasks of the enterprise information system and characterizes the principles of the enterprise information security system. It has been confirmed that highlighting the main circumstances of the deterioration of information security will make it possible to create a secure information support system for the company. Research takes into account individual ideas and provisions, theoretical, methodological and methodological aspects of economic diagnostics of the activity and development of an enterprise in the current operating conditions. All this must be taken into account in the future for further research when improving the system and tools for diagnosing enterprise information security in modern conditions.