Analysis of Information Security Incidents in the Company's Database Management System

The work is devoted to finding solutions to the problems of analyzing information security incidents in the company's database management system and developing requirements for implementing the incident analysis functionality. Often, the stage of analyzing information security incidents in the overall incident management cycle is given very little attention, because of which measures to prevent the recurrence of incidents and recommendations for improving the information security system in the company are not implemented. Meanwhile, the company's database management systems are one of the most vulnerable places in the company. The paper considers the existing problems of incident analysis and ensuring the security of database management systems, considers information security incident management solutions implemented in the company and offered on the market. As a result, recommendations were developed for creating a system for analyzing information security incidents identified by any system in the organization. The proposed solution allows not only to collect a powerful knowledge base of incidents, get quick analytics on them, but also allows to monitor the implementation of recommendations based on the results of incident analysis, using a system of tasks and reminders.