Kozunova S.S., Babenko A.A. The Technique of Investment in Enterprise's Information Security

THE TECHNIQUE OF INVESTMENT IN ENTERPRISE’S INFORMATION SECURITY

Svetlana Sergeevna Kozunova

Postgraduate Student, Department of Computer-Aided Design and Search Design,

Volgograd State Technical University

This email address is being protected from spambots. You need JavaScript enabled to view it.

Prosp. Lenina, 28, 400005 Volgograd, Russian Federation

Aleksey Aleksandrovich Babenko

Candidate of Pedagogical Sciences, Associate Professor,

Department of Information Security,

Volgograd State University

This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it.

Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

Abstract. The paper analyzes the approaches to investment in enterprise’s information security (IS). The authors propose the investment technique that describes the possibilities of applying the theory of investment management in the sphere of IS to the processes of providing IS to enterprises. Investment in information security projects is the key factor of building an efficient information security system of the enterprise. The efficiency of investment depends on the choice of a technique that would ensure the high level of information security. In an enterprise, information security tasks are reduced to corporate security, so a security specialist must be a business analyst. In practice, the investment policy in the sphere of information security is either a part of the overall investment policy of the enterprise projects or a private policy of the quality management system. The proposed technique reflects the processes of information security and investment procedures. Characteristics of information security investments can be obtained through the use of any model, for example, improving the efficiency of investments in information security of the enterprise.

Key words: investment technique, information security, management, enterprise, information security management, information assets.

This work is licensed under a Creative Commons Attribution 4.0 International License.