EVALUATION OF THE EFFECTIVENESS OF CRYPTOGRAPHIC AND ORGANIZATIONAL MEASURES TO PROTECT ELECTRONIC DOCUMENT MANAGEMENT BASED ON THE ANALYSIS OF REAL COMPUTER INCIDENTS

 

Vladislav G. Yarikov

Candidate of Sciences (Pedagogy),

Associate Professor, Department of Methods of Teaching Mathematics and Physics, ICT,

Volgograd State Social and Pedagogical University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Lenina, 27, 400005 Volgograd, Russian Federation

 

Vadim S. Kuleznev

Student, Department of Information Security,

Volgograd State University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Abstract. The article assesses the effectiveness of cryptographic and organizational measures to protect electronic document management (EDM) systems by analyzing real world computer incidents. The authors review key Russian regulatory documents, define relevant cryptographic and organizational measures, and conduct their qualitative analysis. The cryptographic framework includes the use of electronic digital signatures (EDS) and encryption, ensuring data confidentiality, integrity, and authenticity. Organizational measures encompass access control, security policies, user training, and activity monitoring, aimed at mitigating the human factor. The core of the study is an analysis of recent incidents (2023–2025) based on reports from leading cybersecurity companies. The analysis reveals a consistent trend: most EDM security breaches stem from organizational vulnerabilities – such as excessive privileges, poor EDS lifecycle management, and lack of user awareness – rather than from breaches of cryptographic algorithms themselves. Incidents often involve compromised accounts, insider threats, and social engineering. The conclusion emphasizes that while cryptographic tools provide an essential mathematical security foundation, their effectiveness is critically dependent on robust organizational practices. For reliable EDM protection, a holistic approach is necessary, integrating up-to-date cryptographic means with strict implementation of the principle of least privilege, comprehensive logging and monitoring, and regular employee training. Recommendations for improving the security posture of EDM systems are formulated based on the identified incident patterns.

 

Key words: electronic document management, information security, cryptographic protection, organizational measures, electronic signature, encryption, access control, incidents.

 

This work is licensed under a Creative Commons Attribution 4.0 International License.