В статье обосновывается необходимость системного подхода к классификации цифровых угроз безопасности предприятий с учетом источника угрозы (внутренний/внешний), уровня критичности и затрат на защиту. Предлагается матрица угроз с категориями внутренних и внешних угроз, их критичности и превентивными мерами. Разрабатывается алгоритм принятия решений об автоматизации или сохранении ручных процессов на основе сравнения рисков и экономических затрат. Особое внимание уделяется экономическому аспекту: мировые исследования показывают рост средней стоимости утечки данных до ≈4,88 млн USD и значительный эффект от применения автоматизации в снижении затрат на инциденты
The article substantiates the need for a systematic approach to classifying digital threats to enterprise security, taking into account the source of the threat (internal/external), the level of criticality and the cost of protection. A threat matrix with categories of internal and external threats, their criticality and preventive measures is proposed. An algorithm is being developed for making decisions about automating or maintaining manual processes based on a comparison of risks and economic costs. Special attention is paid to the economic aspect: global studies show an increase in the average cost of data leakage to ≈4.88 million USD and a significant effect from the use of automation in reducing incident costs.
The article substantiates the need for a systematic approach to classifying digital threats to enterprise security, taking into account the source of the threat (internal/external), the level of criticality and the cost of protection. A threat matrix with categories of internal and external threats, their criticality and preventive measures is proposed. An algorithm is being developed for making decisions about automating or maintaining manual processes based on a comparison of risks and economic costs. Special attention is paid to the economic aspect: global studies show an increase in the average cost of data leakage to ≈4.88 million USD and a significant effect from the use of automation in reducing incident costs.