Corporate system of information and cybersecurity

Abstract

The article analyses modern cybersecurity technologies and systems such as next-generation firewalls, micro-segmentation, network access control systems, zero-trust remote access, systems protecting against distributed denial-of-service attacks, systems protecting against portal attacks, secure access brokers to the cloud, malware protection systems, email attack protection system, mobile device management systems, user account and authorization management systems, privileged access management systems, physical access protection systems, data leak protection systems, multi-factor authentication and authorization systems, database protection systems, vulnerability analysis systems, attack simulation systems, cyber decoy systems, log and action collection, correlation, and analysis systems, as well as automation systems for actions during an investigation or incident response. The choice of necessary cybersecurity systems for designing a corporate information and cybersecurity system is determined, considering the corporate IT landscape. Critically important components of this system include network protection solutions such as NGFW, workstation and server protection against malicious software based on EDR/XDR, and email system protection. Highly recommended components also include network access management systems and remote access with zero trust, information leakage protection, and a complex system of authentication and authorization. For organizations with medium or high complexity of IT landscapes, cybersecurity analytics cluster systems are critically important, especially event collection and correlation systems and vulnerability analysis systems. Considering the above, a corporate architecture of information and cybersecurity is proposed, which will ensure a layered system of effective protection against cyber threats.