Construction of a Model of Information Security for IT Companies

Within this work a model of information security software developer was constructed. The aim is to construct a model of information security company. To achieve this goal the following objectives have been successfully met: • Learn the basics of building a system of information security; • Analysis of existing methods of information protection; • Discussed the concept of trade secrets and patents in relation to the creation of information security systems; • Built the threat model of the company; • According to the constructed model of threats choice of protective measures was made. The constructed information security model allows to neutralize the relevant threats for the company-software developer. For this purpose the following set of protective measures necessary to enable: • Using non-disclosure mode • Implementation of DLP-system and antivirus protection system. Implementation of the non-disclosure mode will effectively protect confidential information both from outside and from insiders. As a resuls of empirical methods( comparison and measurement) these products have been selected: • DLP solution from company InfoWatch • Antivirus protection system is based on Kaspersky lab. The results of this degree work can be used in the construction of information security not just for another IT company, but also in general for any company that wants to build an effective system of information security.