Information security implies the implementation of measures to prevent various unauthorized actions related to data. Information security procedures are relevant not only for digital, but also for paper data. The main requirement for ensuring information security in the field is the absolute protection of confidential data, the guarantee of their integrity, countering and combating risks that can damage the information and activities of the organization.
Ensuring information security is the implementation of a whole range of organizational and technical measures. So, an instruction was conducted with the employees of the organization, which was conducted by the Head of the ITC – Eremenko M.N. and Software Engineer – Strelyaev I.I. The following topics were considered: control of removable media, security at the level of the corporate network of the organization, an information security event monitoring system, access rights management, a unified architecture of each computer, Ensuring effective and secure user identification when accessing the internal systems of the organization, personal data (PD), the subject of personal data, documents containing personal data data and information system.
