Разработването на политика за безопастност на електронната търговия
The development of policy for the electronic commerce security

Summary/Abstract: The article analyzes the existing gaps in the information security of the Bulgarian small and medium size enterprises (SMEs). The author has attempted to suggest the general principles that have to be followed in developing the policy for the electronic commerce security. Based on them, an original methodology for developing and implementing the e-commerce security policy in the SMEs is proposed. The partial contents of the activities contained in the methodology is considered: clarifying the goals and tasks of the e-commerce security policy; analysis of the information objects and flows that must be defended; analysis of the current status of the information security system in the enterprise and classification of objects into several large groups; specifying how serious the damages may be for the enterprise as a result of an attack on any particular object of the information system; analysis of the risks of security violation in separate components of the system for electronic commerce in SMEs.

• Details
• Contents