THE CONCEPT OF INFORMATION SECURITY IN AN ENTERPRISE: BASIC APPROACHES AND PRACTICAL ASPECTS

Abstract

This article is devoted to the theoretical understanding of the concept of information security in relation to the activities of a modern enterprise. The authors proceed from the fact that in the context of the digital transformation of the economy and the rapid growth of the number of cyber threats, ensuring the safety, integrity, and accessibility of information assets has become not just a technical task, but a strategic priority for any organization. The article analyzes the legal and regulatory framework for defining information security, which is established in Russian legislation and international standards. It examines the key properties of protected information, such as confidentiality, integrity, and accessibility, as well as the specifics of their implementation in a corporate environment. Special attention is paid to modern threats, among which internal insider risks occupy a special place, accounting for a significant portion of incidents, according to research. Based on the analysis of statistical data on the scale of confidential information leaks in the Russian economy in 2024-2025, it is concluded that enterprise information security is a complex system that combines organizational, legal, technical, and personnel components and requires continuous improvement in response to the changing threat landscape.