Data Management in the Information Security Incident Treatment System in a Financial Institution

The paper considers the features of information security incidents processing in the financial organization, the existing problems of data management for information security events, and platforms that simplify the data management process are identified as a solution. The characteristics, advantages, functionality, approaches to using platforms for information security threats analysis and creating of analytical dashboards for the Head, the benefits for businesses in the field of information security are described. Due to the active implementation of the Threat Intelligence Platform (TIP) in the financial organization, there is a need for ongoing monitoring of the status of the process of threats handling by analysts from external TIP sources according to the selected metrics that are important for business. The developed analytical application helped solve the issues of structuring, analysis, optimization and the management information quality improving.