Classification of threats to enterprise security in the context of digital transformation: economic and organizational aspects

Abstract

The article substantiates the need for a systematic approach to classifying digital threats to enterprise security, taking into account the source of the threat (internal/external), the level of criticality and the cost of protection. A threat matrix with categories of internal and external threats, their criticality and preventive measures is proposed. An algorithm is being developed for making decisions about automating or maintaining manual processes based on a comparison of risks and economic costs. Special attention is paid to the economic aspect: global studies show an increase in the average cost of data leakage to ≈4.88 million USD and a significant effect from the use of automation in reducing incident costs.