Additional costs for security in handling classified information

Abstract

The costs for information security are mandatory to provide so-called "industrial security", i.e. the ability of the company or organization to work on contracts related to classified information. However, because the information security is ensured by a set of measures at each stage of the information system life cycle it is possible to solve the problem in stages. Generally in the value of specialized security system are included: design work, purchase and setup of hardware and software products, incl. firewalls, encryption tools, antivirus systems, authentication, and authorization, and administration instruments. It is necessary to add the costs to sustain of physical security, personnel training, management, maintenance and regular updating of the system and finally-for security audit. The paper analyzed some possible alternatives for the implementation of security system, as a result of the assessment of the information resources value.