DEVELOPMENT OF AN INFORMATION MANAGEMENT PROGRAM SECURITY IN THE 1C: ENTERPRISE 8.3 CONFIGURATION

An integrated approach to information security management is presented in the form of processes on decomposition diagram IDEF0 model. The analysis possible damage assets recommended be carried out according two groups criteria with involvement experts, based qualitative scales. Expert threats and vulnerabilities through which they can implemented proposed conjunction use scales, taking into account presence control mechanisms organization. results are expressed total level vulnerability group. A matrix for determining magnitude risk constructed. obtained estimates compared quantitative indicator average annual calibrated. As a marker effectiveness protective mechanisms, it choose return investment ratio. In order increase efficiency convenience conduct-ing an expert assessment risks, automating processing ob-tained during examination, as well calculations decision-maker rely, program was created configuration 1C: Enterprise 8.3