Един подход за формиране на политика за безопасност и защита на данните в малки и средни предприятия
One Approach to Policy Formation of Safety and Security of Data in Small and Medium Enterprises

Summary/Abstract: The article offers an approach to establishing the safety policy of e-commerce in SMEs, which is based on several principles: identification and authentication; data storage; orders processing; description of the performance, usage of the leading technologies and proven solutions in electronic commerce; investment protection; security of the transactions. The content of each of the key phases through which the development of safety policy in SMEs passes is analyzed: clarification of the goals and the aims of the safety policies of the electronic commerce; analysis of the information objects and flows that must be protected; analysis of the current state of the information security system in the enterprise; classification of the objects that need protection; specification how serious the damages may be for the enterprise in a result of the attack of IP; analysis of the risks of security breach in the individual components of the system for e-commerce; development of the safety policy; financial costs of implementing the policy for safety; testing, acceptance, documentation and optimization of the safety policy.

• Details
• Contents