Method for complex information security management

Abstract

The functioning of any modern entity, which practice is related to the services provision or products manufacturing, concerns solving of the important task – complex information security providing. Wherein, complex information security providing is meant two tasks: information security providing or the protection of entity's information resources and the protection directed against possible information and psychological effects caused by competitors. At the article possible information security violations are considered as potentially possible conflicts, those might arise at different management levels and could be accompanied by various kinds of confrontations as elements of the hybrid war for resources gaining. The theorem is presented, which allows to formalize necessary and sufficient conditions for efficient performance of the modern enterprise as the complex protection object. The article contains the first presentation of the notion of the information obfuscation as the technology of person entanglement as a result of the special information and psychological impacts provision and it is proposed the versatile and flexible method of the complex information security management, which considers the vital activity stages peculiarities of both the protected entity and complex information protection system. The proposed method is considered to be integrated into the structure of the situational centers, which are to provide the required level of the entity protection at the scale «enterprise-region-state».