Approach to the problem of information protection in the organization

Abstract

Information is a strategic resource of modern society, hence the importance that their protection has for the functioning of organizations, as well as for their very survival. Scientific theory today agrees that the issue of security, ie protection of information and their resources goes beyond the area of necessary knowledge that is exclusively technical in nature and without which it is not possible to establish an information system, but that non-technical aspects are crucial for the information protection process. culture, size of the organization, amount of budget for security needs and more. The process of arranging information protection in an organization largely depends on understanding the relationship between the concepts of information security (IS) and IT security / security in the IT field, where in practice there is a harmful practice that IT security is superior. The term information protection (IS). This practice leads to neglect of non-technical aspects of information protection as part of the organization's security system, and especially in the area of developing employees' awareness of safe behavior within the organization, which ultimately gives the organization greater exposure to security challenges, risks and threats.