Analysis of information security aspects based on the formal models of business processes

Download article in PDF format

Authors: Pestunova T. M., Rodionova Z. V., Gorinova S. M.

Annotation: We outline an approach to analysis of information security aspects basing on formal models of company’s business processes that are described in terms of standard business-modeling notations. Process is considered as a protected object. We partially analyzed some widespread risk evaluation methods in context of the objects used in EPC-model.

Keywords: information security, risks, models of business processes, access rights