Formation of a Security Policy Based on Data Categorization and Analysis of Threats to Information Security of the Financial and Analytical System of the Higher School of Economics

The final qualification work is dedicated to the development of a Security Policy for the Financial and Analytical System (FAS) of the National Research University "Higher School of Economics" (HSE). The policy is based on the categorization of the processed data and the analysis of information security threats in the financial division. The work defines the objects and information assets of the FAS, calculates the system's risks, and identifies its vulnerabilities. The study also investigates software and hardware security solutions. Additionally, physical security measures, including access control, protection against external impacts, redundancy, and fault tolerance, are considered. Special attention is paid to compliance of the information security policy with the applicable laws and regulations of the Russian Federation.