Organization of an Integrated Approach to Ensuring Information Security in a Construction Company

The relevance of ensuring security in the construction sector is due not only to the importance of information for the effective functioning of enterprises, but also to the level of vulnerability of the industry to various threats to information security. Even minor information leaks can lead to significant consequences and to interruptions in the functioning of business processes in construction companies, especially in conditions of relative low development of this industry, therefore it is necessary to strictly comply with legislative norms and systematically update documentation. One of the main tasks is to develop and implement an information security policy aimed at protecting data privacy. An analysis of the required documentation and interviews with employees helped to identify the strengths and weaknesses of the organization, as well as identify threat models and violators, followed by a risk assessment. Based on the collected data, regulatory documents such as the Information Security Policy, Privacy Policy and Personal Data Regulations have been developed. These documents regulate the company's activities in the field of information security and the use of appropriate technical means. Successful implementation of regulations helps to reduce vulnerabilities, reduce fines and improve reputation with partners.