MANAGEMENT OF THE STATE OF INFORMATION SECURITY IN HIGHER EDUCATIONAL INSTITUTIONS BASED ON ITS ASSESSMENT

Bulygin Ivan Maksimovich

This article covers the issues of assessing the level of information security for infrastructure and elements of information educational environments in higher educational institutions. The objectives of this article are: 1) justify the importance of conducting an assessment; 2) describe the main security violators in higher education institutions, dividing them according to the degree of interest in committing malicious acts, based on primary motives and authority; 3) highlight the key areas to be assessed; 4) describe approaches to determining the weighting coefficients of areas and individual measures within areas; 5) identify a basic set of threats to which institutions are exposed; 6) identify the main risks associated with violation of information security requirements and best practices for maintaining the level of infrastructure security. As a result, the article proposes to link the assessment results with the threats and, as a consequence, the risks that the institution is exposed to, which will allow the organization’s management to build a prioritized plan to increase the level of security.

Keywords:information educational environment, information security, intruder model, threats to information security, information security risks, assessment of the state of security, level of security