Conceptual information modelling within the contemporary information security policies

摘要

The contemporary information security policies are analysed in the paper. These policies are characterised by increased similarities among the information security requirements of different sectors of society. Also, they are characterised by the increased differences in comparison with the traditional approach to the security within the closed environment. Key factors of the information security policy: people, process, and technology, are closely related to the requirements and restrictions imposed on certain type of information. In that way the approach to conceptual information modelling becomes one of the central problems of contemporary information security policies. The paper elaborates the approach to the conceptual information modelling, stressing the requirements of both the protection and the sharing of information. It offers the taxonomy of the main terms, which is the base for the development of proposed conceptual model of the information definition and sharing. The conceptual model is based on the standard UML graphical notation that makes it easier to visualize and understand the proposed model and the approach applied in the paper. The proposed model introduces formalized and more structured approach to this field in order to facilitate the development of the solutions that can keep up with the growing complexity of contemporary information security policies.