Methodological approach to information resource security management in electronic document management systems

The active implementation of electronic document management systems in the activities of organizations of various profiles necessitates the provision of a high level of security for processed information resources. The paper presents the development of the methodological foundations of organizational and technological management of the subsystem for the protection of information resources in electronic document management systems. A conceptual model is proposed that describes a two-circuit control structure, including a control loop for a set of software protection tools and a control loop for the protection subsystem itself. The task of management optimization is formulated, the criterion of which is the maximization of an integral indicator of the effectiveness of the information resource protection subsystem, combining qualitative and quantitative characteristics. The indicator of temporary non-conflict is described in detail, for the assessment of which the apparatus of semi-Markov processes is used. A methodology has been developed for organizational and technological management of the effectiveness of the subsystem for the protection of information resources based on a purposeful change in key controlled parameters that affect the dynamics of the subsystem's functioning. An appropriate algorithm has been created to search for optimal values of the controlled parameters of the information resources protection subsystem of the electronic document management system. The results of computational experiments are presented, demonstrating the nature of the influence of various parameters on the resulting efficiency. The proposed solutions form the basis for the creation of automated decision support systems for managing the information security of electronic document management systems.