This paper presents an approach to simplifying security in large organizations, ensuring that the work of ordinary employees is more accessible without negatively impacting the organization's security. Access to the Internet is becoming increasingly important in various aspects of human life, including interpersonal communication, professional work, and business operations. Enterprises have digitized information on their devices, which can be of interest to attackers. Incorrect security measures can expose companies to various losses, such as financial costs or image losses. As the number of enterprises connected to the Internet grows, IT system security is gaining importance. Cyberattacks are malicious actions by individuals or organized groups with motives such as financial gain, employee dissatisfaction, or government interference. Attackers aim to access financial data, customer lists, financial data, and customer databases. Cybersecurity should be the basis of every organization, regardless of its size. The number of attacks each year is related to increased investments in cybersecurity strategies and focusing on finding and stopping hackers. Information security protects information to prevent unauthorized access, use, and disclosure. It includes implementing policies and procedures to protect information and prevent data loss or theft. However, implementing security measures can be challenging for ordinary employees, leading to decreased security.
W artykule prezentowane są problemy zapewniania biznesowej ciągłości działania organizacji ze szczególnym uwzględnieniem uwarunkowań informacyjnych. Identyfikacja ciągłości działania związana jest z analizą ryzyka i kryteriami jego oceny w aspekcie integralności, dostępności i spójności danych. Te czynniki mają bezpośredni wpływ na poziom bezpieczeństwa informacyjnego. Główne aspekty zapewniania informacyjnej ciągłości działania zawierają się w procedurach biznesowej, całośc iowej ciągłości działania organizacji. Cały artykuł eksponuje problem bezpieczeństwa organizacji.
EN
The article presents assumptions for modeling of organization contingency, emphasizing threats for its critical infrastructure. Identification rules and criteria for risk assessment in the aspect of accessibility, confidentiality and integrity of information resources including rules for defining strategic organization resources, which influence its contingency and performance in a threat or damage state has been defined. Main aspects of organization procedures creation, which are integral part of contingency plan has been presented. Whole article has been summarized by a debate of system approach to organization security.
3
Dostęp do pełnego tekstu na zewnętrznej witrynie WWW
The article concerns security of process organizations, oriented to customer and wide cooperation with environment. Information processes are more and more important. This is why security of information resources is equal to security of whole organization. Participation of organization in realization of many different processes triggers many threats. Information asymmetry becomes a must, in particular for distributed organizations, cooperating with one another by using Internet platform.
4
Dostęp do pełnego tekstu na zewnętrznej witrynie WWW