Functional model of information security systems

Abstract

The subject of the study is modeling the information security system for organizations where there are special requirements for protected information under the legislation of Ukraine. Special requirements for information protection are available for any organizations, enterprises and institutions of any sphere of activity and any form of ownership. Such requirements are conditioned by the classification of information, regulatory documents, special requests of the customer for such security information systems, as well as the verification of the compliance of sharp requirements and the satisfaction of users and/or customers with the establishment of information security systems. The research topic is related to the creation of a security information system and attempts to simulate the most effective and most effective protection system by means of a scientific method – modeling, which is used in various fields of activity. The versatility and effectiveness of simulation has been proven by the practice of applying and reproducing tools for implementing simulation results. Therefore, the purpose of this article is to develop a functional model of information security for an organization where circulating confidential and/or service information that needs protection in accordance with Ukrainian legislation. The research was based on the methodology of simulating and comparing different types, levels, and applications of models in the practical work of creating information security systems. The results of the work reflect the theoretical study of the foundations of modeling, analysis of the practical application of results for various systems, knowledge of requirements and criteria for models, and verification of the reproducibility of real processes, phenomena and the functioning of information security systems, based on the restrictions and conditions regarding the protected information. The scope of the results is due to the specific needs of organizations to calculate various results using the simulation methodology. Summing up, we note the importance of this study for the purpose of creating a unique information security system for each individual organization whose purpose is to provide information security. The variety of models and methods of modeling confirms the unconditional and exceptional value of the research using the principles of simulation for Ukrainian security information security organizations.