Information Security Management

ISM (Information Security Management) is a set of measures aimed at creating and maintaining stable infrastructure operation. ISM provides information storage, access to it, and user accounting.

The ISM structure is a broad set of processes and capabilities for taking organizational measures that ensure the protection of information interaction in the “user-service provider” format. The model provides information security for the organization’s infrastructure at different levels of data processing and provision.

There are three key components that require information security. They are considered the foundation for effective information security management:

1. Confidentiality. A set of measures that differentiate levels of access to data for specific entities within the enterprise, following clearly defined regulations.
2. Integrity. The immutability of stored information. The exception is the work with information by users who have the right to do so or are vested with special powers.
3. Availability. Protocols that allow specific users to obtain prompt and stable access to stored data.

Information security models are considered taking into account the specifics of the business. In other words, the model changes for each situation depending on the requirements for the object of informatization. The most effective methods provide for the security of each process in the organization. They treat it as a single process, excluding access to information by unauthorized persons.

Components

ISM elements that are considered mandatory:

• Compliance with IS policies when creating and incorporating data into the business environment.
• The need to perform all business processes in accordance with security requirements.
• Creation and use of a special set of protocols that prevent the risk of unauthorized access (UA) to the company’s information systems. They also exclude the occurrence of any failures and loss of information.
• Logging of any incidents, failures that occurred during the work process, as well as their consequences — “damage.”
• Identifying vulnerable parts in the company’s corporate processes.
• Systematic research and modernization of protection mechanisms with their further connection to all corporate elements.

All of the above ISM elements must be coordinated with each other. Changes to this structure must also be agreed upon between the customer and the ISM service provider.