Method of information security management in banking institutions using ISMS "Matrix"
Дмитро Валерійович Домарєв, Валерій Валентинович Домарєв · Ukrainian Scientific Journal of Information Security · 2013
Actuality of information security management is proved. Theoretical basis of the proposed method is the system approach to information security. For the practical realization of the offered method, the information security management system "Matrix" is applied. The following procedures are described: forming of normative base about classified information, description of critical business-processes and hardware/software infrastructures supporting them, description of the bank’s organizational structure covered by an ISMS, assignment of staff responsible for the implementation of the ISMS, estimation of information security risks of a banking institution, creation of the emergency recovery plan. Conclusion is made about the applicability of ther proposed method to the information security management in banking institutions.