Features of the implementation of the security policy of the distance course

Abstract

Ensuring information security remotely of the course provides for the creation of a system to protect its information resources from intruders who want to use, modify or simply destroy these resources. Information security is understood as "the state of information security, in which its confidentiality, accessibility and integrity are ensured. The complex nature of the protection problem suggests that a combination of legislative, organizational, and software and technical measures is necessary to solve it. Knowledge of possible threats, as well as vulnerabilities of the information system, is necessary in order to choose the most effective means of ensuring security. One of the most dangerous and frequent are unintentional errors of users, operators, system administrators and other persons serving information systems. Sometimes such errors lead to direct losses (incorrectly entered data, an error in the program that caused the system to stop or collapse). Sometimes they create weaknesses (most often due to administrative errors) that can be exploited by attackers. The second place in terms of damage is occupied by theft and falsification. In most cases, the perpetrators turned out to be full-time employees  of organizations who were well acquainted with the working hours and protective measures. The key stage for building a reliable information system is the development of a security policy. There are several definitions of this concept.