PRINCIPLES FOR DEVELOPING AND IMPLEMENTING INFORMATION SECURITY POLICIES IN ORGANIZATIONS
Article Sidebar
Main Article Content
Abstract
This thesis covers the theoretical and practical aspects of developing and implementing information security policies in organizations. It also analyzes the basic principles used in the formation of an information security management system, their content and practical significance. As a result of the rapid development of modern information and communication technologies, the activities of organizations are increasingly moving to a digital environment. This further strengthens the need for reliable protection of information resources. Information security today is considered not only a technical issue, but also a complex system that includes managerial, organizational and legal approaches. Therefore, each organization must ensure the stability of the information environment by developing, approving and implementing an information security policy in its activities.
Article Details
Section
This work is licensed under a Creative Commons Attribution 4.0 International License.
How to Cite
References
.O‘zbekiston Respublikasi Prezidenti Sh.M. Mirziyoyevning “Raqamli O‘zbekiston – 2030” strategiyasini amalga oshirish chora-tadbirlari to‘g‘risida”gi qarori. — Toshkent, 2020 yil.
2.O‘zbekiston Respublikasi “Axborotlashtirish to‘g‘risida”gi Qonuni. — 2003 yil 30 aprel (2022 yilgi o‘zgartirishlar bilan).
3.O‘zbekiston Respublikasi “Axborot xavfsizligi to‘g‘risida”gi Qonuni. — Toshkent, 2023 yil.
4.ISO/IEC 27001:2022 — Information Security Management Systems — Requirements. International Organization for Standardization, Geneva, 2022.
5.ISO/IEC 27002:2022 — Information Security, Cybersecurity and Privacy Protection — Information Security Controls. ISO, Geneva, 2022.
6.NIST Special Publication 800-53. — Security and Privacy Controls for Federal Information Systems and Organizations. National Institute of Standards and Technology, USA, 2020.
7.COBIT 2019 Framework: Governance and Management Objectives. ISACA, USA, 2019.
8.Abdulxayev S.S., Jo‘rayev I.I. Axborot xavfsizligi asoslari. — Toshkent: TATU nashriyoti, 2021.
9.Nurmatov B.M. Axborot xavfsizligini boshqarish tizimlari. — Toshkent: “Fan va texnologiya” nashriyoti, 2020.
10.Qodirov A. Axborot tizimlari va texnologiyalari xavfsizligi. — Toshkent: TATU, 2019.
11.Whitman, M.E., Mattord, H.J. Principles of Information Security. 7th Edition. — Cengage Learning,
12.Peltier, T.R. Information Security Policies, Procedures, and Standards: Guidelines for Effective Information Security Management. — Auerbach Publications, 2016.
13.Solovyev A.A., Kovalev V.Yu. Информационная безопасность организации. — Москва: ИНФРАМ, 2019.
14.Krutov I.A. Информационная безопасность: теория и практика. — Москва: Бином, 2021.
15.O‘zbekiston Respublikasi Vazirlar Mahkamasi qarori “Davlat axborot resurslari va tizimlarining axborot xavfsizligini ta’minlash tartibi to‘g‘risida”. — Toshkent, 2021-yil 12-yanvar.
16.Sayyora Faxriddinovna:Маманова С. Методика развития речевой компетентности у студентов профессионально-технических учебных заведений //Информатика и инженерные технологии. – 2023. – Т. 1. – №. 1. – С. 417-420.
17. Mamanova S. “Bo‘lajak o‘qituvchilar nutqini takomillashtiruvchi muhim vositalar” Zamonaviy sharoitda oliy ma’lumotli mutaxassislarni tayyorlashning innovatsion yo‘nalishlari: muammo va yeсhimlar respublika ilmiy-nazariy anjumani-2024-y
18.Ashurova S., Mamanova S. WAYS TO DEVELOP SPEAKING ACTIVITY OF VOCATIONAL SCHOOL STUDENTS //Zamonaviy ilmiy-texnik tadqiqotlar. – 2023. – Т. 1. – №. 1. – С. 71-78.
19.O‘rmonjonov Azizbek Muhammadjon o‘g‘li. (2025). MAKTABGACHA TA’LIM YOSHIDAGI IMKONIYATI CHEKLANGAN BOLALAR UCHUN INKLYUZIV TA’LIM SHAROITIDA MUSIQIY TA’LIMNI TASHKIL ETISH METODIKASI. Kelajak o’qituvchisi - Kelajak Bunyodkori, 1(1), 470-475.
20.Ramziddin Tursunov. (2025). IJTIMOIY ONG VA MA’NAVIYAT TUSHUNCHASI HAMDA UNING MAZMUN-MOHIYATI. Kelajak o’qituvchisi - Kelajak Bunyodkori, 1(2), 36-40