Regulation of Informational Security Compliance in Russian Companies

The purpose of the study was to determine the legal, methodological, tactical and technological foundations of activities related to the regulation of compliance in the field of information security of Russian companies, and to develop appropriate reasonable proposals and recommendations on this basis. The following tasks were solved within the framework of the study: the concept, essence and current state of information security in the Russian Federation were defined; the Russian legal system of information security regulation was studied in comparison with similar leading legal systems; innovative technologies for ensuring corporate information security and their effectiveness in responding to modern challenges and threats were analyzed; the characteristics of the compliance system as the basis of security were determined enterprises; the effectiveness of the practices of Russian corporate compliance systems in comparison with the best foreign models is evaluated; the importance of legal regulation of compliance in the field of information security of Russian enterprises is substantiated, indicating the compliance methods used; measures for further development and optimization of legislation ensuring the activities of compliance systems in the field of information security of Russian enterprises are developed; The ways of effective practical interaction of corporate compliance systems with other non-governmental innovative systems, as well as with law enforcement agencies in countering modern incidents, are proposed.