M.A. Pavlov1

1 Bauman Moscow State Technical University (Moscow, Russia)
1 mikhail.pavlov.mgimosgp@gmail.com

Problem statement. It is necessary to effectively manage the implementation of digital security measures of an organization to ensure the cybersecurity of an information system in the context of digital transformation and minimize the risk of possible losses and security breaches.

Goal. Perform a comprehensive analysis and benchmarking of frameworks in this area.

Results. The main documents regulating cybersecurity and IT risks in digital transformation are analyzed, standard guidelines, recommendations and frameworks for information security and cybersecurity management are analyzed. System solutions for the development of a cyber and digital security strategy have been identified.

Practical significance. A model of a cybersecurity and business continuity management system in the context of an organization's digital transformation is proposed. Recommendations for the organization's digital security management mechanism are described.

Pavlov M.A. Management frameworks information technology and cyber risks during the digital transformation of the organization. Dynamics of complex systems. 2024. V. 18. № 3. P. 23−33. DOI: 10.18127/j19997493-202403-03 (in Russian).

1. Drogovoz P.A., Koren'kova D.A., Pavlov M.A. Kiberbezopasnost' v mezhdunarodnoj kosmicheskoj industrii: kooperativno-igrovoj podhod k garmonizacii jekonomicheskih interesov stejkholderov. XLVI Akademicheskie chtenija po kosmonavtike, posvjashhennye pamjati akademika S.P. Koroleva i drugih otechestvennyh uchenyh – pionerov osvoenija kosmicheskogo prostranstva (Moskva, 25–28 janv. 2022 g.): Sb. tez. Vseros. nauch. konf. / RAN [i dr.]; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: Izd-vo MGTU im. N.Je. Baumana. 2022. T. 2. S. 48–54.
2. Drogovoz P.A., Koren'kova D.A. Sovremennyj instrumentarij gibkogo upravlenija IT-proektami i perspektivy ego sovershenstvovanija s ispol'zovaniem tehnologij iskusstvennogo intellekta. Jekonomika i predprinimatel'stvo. 2019. № 10. S. 829–833.
3. Drogovoz P.A., Jusufova O.M., Koren'kova D.A. Cifrovaja transformacija proizvodstvennyh sistem: obzor osnovnyh napravlenij i faktorov razvitija. X Charnovskie chtenija (Moskva, 4–5 dek. 2020 g.): Cb. trudov Vseros. nauch. konf.i po organizacii proizvodstva / FGBOU VO «Moskovskij gosudarstvennyj universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)» [i dr.]. M.: NOC «Kontrolling i upravlencheskie innovacii». 2021. S. 61–68.
4. Drogovoz P.A., Pushkareva P.P. Specifika upravlenija investicionnymi riskami v naukoemkoj promyshlennosti. Budushhee mashinostroenija Rossii (Moskva, 22–25 sen. 2020 g.): Cb. dokladov XXIII Vseros. nauch. konf. molodyh uchenyh i specialistov (s mezhdunar. uchastiem):
   v 2 t. T. 2 / Sojuz mashinostroitelej Rossii, Moskovskij gosudarstvennyj universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet). M.: Izd-vo MGTU im. N.Je. Baumana. 2020. S. 371–373.
5. Drogovoz P.A., Raldugin O.V. Matematicheskoe modelirovanie riskov kooperacii po sozdaniju sistemy vozdushno-kosmicheskoj oborony. XLIII Akademicheskie chtenija po kosmonavtike, posvjashhennye pamjati akademika S.P. Koroleva i drugih otechestvennyh uchenyh – pionerov osvoenija kosmicheskogo prostranstva (Moskva, 29 janv. – 1 fev. 2019 g.): Sb. tez. vseross. nauch. konf. / RAN [i dr.]; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: Izd-vo MGTU im. N.Je. Baumana. 2019. T. 1. S. 167–169.
6. Drogovoz P.A., Raldugin O.V. Informacionno-tehnologicheskie faktory razvitija kooperacii v oboronno-promyshlennom komplekse i risk-
   orientirovannyj podhod k ee formirovaniju pri sozdanii sistemy vozdushno-kosmicheskoj oborony. Jekonomicheskie strategii. 2016. T. 18. № 7 (141). S. 76–89.
7. Drogovoz P.A., Kashevarova N.A., Dadonov V.A., Sadovskaya T.G. and Trusevich M.K. Industry 4.0 in Russia: Digital Transformation of Economic Sectors. in Industry 4.0 in SMEs Across the Globe: Drivers, Barriers, and Opportunities, edited by J.M. Müller, N. Kazantsev (CRC Press, Boca Raton, 2021). Р. 195–211. https://doi.org/10.1201/9781003165880-15
8. Jerman-Blažič B. et al. An economic modelling approach to information security risk management. International Journal of Information Management. 2008. V. 28. №. 5. S. 413–422.
9. Huang C.D., Hu Q., Behara R.S. An economic analysis of the optimal information security investment in the case of a risk-averse firm. International journal of production economics. 2008. V. 114. №. 2. S. 793–804.
10. Shiau W. L., Wang X., Zheng F. What are the trend and core knowledge of information security? A citation and co-citation analysis. Information & Management. 2023. V. 60. №. 3. S. 103774.
11. Arora H., Raghu T.S., Vinze A. Autonomic Computing and Information Security. Information Assurance, Security and Privacy Services. 2009. S. 141.
12. Liu P., Zang W., Yu M. Incentive-based modeling and inference of attacker intent, objectives, and strategies. ACM Transactions on Information and System Security (TISSEC). 2005. V. 8. №. 1. S. 78–118.
13. Veselovsky M.Y., Izmailova M.A., Lobacheva E.N., Pilipenko P.P. and Rybina G.A. Strategic management of innovation development: Insights into a role of economic policy. Entrepreneurship and Sustainability Issues. 2019. 7 (2), 1296–1307. https://doi.org/10.9770/jesi.2019.7.2(34)
14. Skvortsova M., Terekhov V., Proletarsky A., Skvortsov V., Kochneva M. Visualization of Integrated Indicators of Information Risk in Decision Support Systems. in 2020 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering (EIConRus). 2020. Р. 2101–2105. https://doi.org/10.1109/EIConRus49466.2020.9038952
15. Marchenkova O.V., Shiboldenkov V.A. Analiz perspektivnyh tehnologij cifrovizacii v naukoemkom sektore jekonomiki. XLVI Akademicheskie chtenija po kosmonavtike, posvjashhennye pamjati akademika S.P. Koroleva i drugih otechestvennyh uchenyh – pionerov osvoenija kosmicheskogo prostranstva (Moskva, 25–28 janv. 2022 g.): Sb. tez. Vseros. nauch. konferencii / RAN [i dr.]; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: Izd-vo MGTU im. N.Je. Baumana. 2022. T. 2. S. 87–89.
16. Shipkova A.D., Shiboldenkov V.A. Nauchno-analiticheskoe issledovanie jeffektivnosti ispol'zovanija skvoznyh cifrovyh tehnologij v kosmicheskoj otrasli. XLVI Akademicheskie chtenija po kosmonavtike, posvjashhennye pamjati akademika S.P. Koroleva i drugih otechestvennyh uchenyh – pionerov osvoenija kosmicheskogo prostranstva (Moskva, 25–28 janv. 2022 g.): Sb. tez. Vseros. nauch. konferencii / RAN [i dr.]; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: Izd-vo MGTU im. N.Je. Baumana. 2022. T. 2. S. 195–202.
17. Mihnenko P.A. Cifrovoj menedzhment: modeli razvitija koncepcii. Innovacii v menedzhmente. 2020. № 3 (25). S. 30–39.
18. Avdeeva M.V., Vorotnikova S.S., Shiboldenkov V.A. Obzor cifrovyh reshenij na osnove tehnologii raspredelennogo reestra dlja obespechenija verificiruemosti biznes-processov na naukoemkom predprijatii ajerokosmicheskoj otrasli. XLVII Akademicheskie chtenija po kosmonavtike, posvjashhennye pamjati akademika S.P. Koroleva i drugih otechestvennyh uchenyh – pionerov osvoenija kosmi­cheskogo prostranstva (Moskva, 24-27 janv. 2023 g.): Sb. tez. / RAN [i dr.]; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: Izd-vo MGTU im. N.Je. Baumana. 2023. T. 1. S. 384–385.
19. Shiboldenkov V.A. Cifrovaja transformacija proektnoj dejatel'nosti v naukoemkoj organizacii kosmicheskoj otrasli. Ajerokosmicheskie tehnologii (Reutov, 28 maja 2019 g.): Sb. materialov Mezhdunar. molodezh. nauch.-tehn. konf., posvjashhennoj 105-letiju so dnja rozhdenija akademika V.N. Chelomeja / OAO «VPK «NPO mashinostroenija»; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: VPK «NPO mashinostroenija»; MGTU im. N.Je. Baumana. 2019. S. 135–136.
20. Kashevarova N.A., Shiboldenkov V.A. Cifrovye instrumenty gibkogo proektnogo upravlenija pri organizacii inkremental'nyh innovacij v kosmicheskoj otrasli. XLIV Akademicheskie chtenija po kosmonavtike, posvjashhennye pamjati akademika S.P. Koroleva i drugih otechestvennyh uchenyh – pionerov osvoenija kosmicheskogo prostranstva (Moskva, 28-31 janv. 2020 g.): Sb. tez. Vseros. nauch. konf. / RAN [i dr.]; FGBOU VO «Moskovskij gosudarstvennyj tehnicheskij universitet imeni N.Je. Baumana (nacional'nyj issledovatel'skij universitet)». M.: Izd-vo MGTU im. N.Je. Baumana, 2020. T. 1. S. 364–366.