Analyzing the Efficiency of a Governmental Information Security Management System

Abstract

Aim. This study is dedicated to the determination of a set of measures aimed at ensuring the efficient functioning of the information security management system (ISMS) of a government agency (GA) and proposing managerial solutions on the basis of the assessment of the system. Tasks. This study develops a set of measures obtained during the assessment of information security (IS) risk control measures aimed at improving managerial decisions and ISMS. Methods. This study uses general scientificcognition, expert assessment, and statistical data-processing methods to develop proposals for improving managerial decision management. Results. This study presents the results of an experimental ISMS audit procedure using a systems approach for obtaining assessments of the current state of the ISMS of a GA that includes the legislative, administrative, technical, organizational, and social components. Conclusion. The social and economic security of the IS administrator represents the main IS risks. Managerial decisions should be aimed at improving the ISMS of a GA through guidelines for the improvement of resources with the purpose of ensuring the functioning of the management system.