AXBOROT XAVFSIZLIGINI BOSHQARISH TIZIMLARI
https://doi.org/10.5281/zenodo.14204145
Keywords:
axborot xavfsizligi, axborot xavfsizligini boshqarish tizimi (ISMS), xavf tahlili, ISO/IEC 27001, xavfsizlik siyosati, xalqaro standartlar, axborot tizimlarini himoya qilish, ma'lumotlarning maxfiyligi, butunligi va mavjudligi, tashkilotlarda xavfsizlik boshqaruviAbstract
Ushbu maqola axborot xavfsizligini boshqarish tizimlari (ISMS) haqida bo'lib, axborot ta'minlashda ISMSning ahamiyati, uning asosiy prinsiplari, joriy etish jarayoni va muvaffaqiyatli boshqarish uchun zarur bo'lgan metodologiyalarni ko'rib chiqadi. ISMS axborot xavflarini tahlil qilish, xavf va xavfsizlik siyosatini ishlab chiqish, hamda tashkilotlar uchun muhim bo'lgan xavfsizlik choralarini joriy etishga qaratilgan tizimli yondashuvni taqdim etadi. Maqolada shuningdek, ISO/IEC 27001 va boshqa xalqaro standartlarga asoslanib ISMSning muvaffaqiyatli ishlashini ta'minlashga yordam beruvchi metodlar va tajribalar muhokama qilinadi. Tashkilotlar axborot xavfsizligini boshqarishning samarali tizimlarini o'rnatish orqali o'z ma'lumotlarining xavfsizligini saqlash, yuridik talablarni bajarish va mijozlarning ishonchini oshirish imkoniyatiga ega bo'ladilar .References
ISO/IEC 27001:2013. (2013). Information technology — Security techniques —
Information security management systems — Requirements. International Organization for
Standardization.
Peltier, T. R. (2016). Information Security Policies, Procedures, and Standards: A
Practitioner's Reference. CRC Press.
Baskerville, R., & Siponen, M. (2002). "An Information Security Research Agenda."
Computers & Security, 21(7), 544–553.
Laudon, K. C., & Laudon, J. P. (2019). Management Information Systems: Managing
the Digital Firm. Pearson Education.
NIST Special Publication 800-53. (2020). Security and Privacy Controls for Information
Systems and Organizations. National Institute of Standards and Technology.
Whitman, M. E., & Mattord, H. J. (2019). Principles of Information Security. Cengage
Learning.
Gerber, M., & Solms, R. V. (2018). "Information Security Governance." International
Journal of Information Management, 42, 108–116.
Heiser, J., & Smith, B. (2021). "Risk Management and Information Security."
International Journal of Information Security and Privacy (IJISP), 15(2), 39–55.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
