Search

Search Results

• INFORMATION SECURITY MANAGEMENT IN THE DIGITAL TRANSFORMATION PROCESS: MODELING BASED ON HETEROGENEOUS GRAPHS AND RISK METRICS

  К.V. Yakimenko , V.V. Zolotarev

  246-256

  2025-07-24

  Abstract ▼

  This study is devoted to the critical problem of ensuring information security of organizations in the context of active digital transformation, which inevitably entails an increase in attack surfaces, the emergence of new vulnerabilities and risks of destabilization of security systems. The authors propose a process-oriented approach based on modeling business processes (BP) and the IT landscape using heterogeneous graphs. This model represents three key types of entities: operations, information systems (IS), and data as objects of protection, as well as attributed edges reflecting transmission channels and their security characteristics. This approach ensures the complete identification of CII objects in accordance with the requirements of the FSTEC and allows the analysis of complex relationships in the transitional states of CT. The study developed a set of key quantitative metrics for information security risk management:
  1. Number of Critical Paths (CCPs): Reflects the change in the attack surface when adding/removing ICS and data routes. 2. Node Centrality Level (UCU): Defines the most critical for connectivity and vulnerable IP (risk concentration points). 3. Data Distribution Index (DDI): Characterizes the ratio of cloud and local data storage/processing nodes and the associated control and security risks. 4. Recovery Time (BB): Evaluates the stability of the PS to failures and attacks. 5. The level of Automation of Protection (UAZ): Shows the proportion of automated information security tasks for rapid response. Based on the model and metrics, a dynamic algorithm for managing the information security of the CT process is proposed. The algorithm provides: 1. Construction of graph models of BP "as it is" and "as it should be". 2. Continuous dynamic updating of the current state model during the CT. 3. Regular calculation of metrics for risk assessment in transition states. 4. Updating the list of risks and protective measures based on the analysis of metrics. The results include practical recommendations on: reducing the attack surface; prioritizing node protection with a high level of criticality; optimizing data distribution taking into account security and fault tolerance requirements. The proposed approach ensures transparency and manageability of information security at all stages of the IT process, increases the resilience of the IT landscape to threats and compliance with regulatory requirements.

• DEVELOPMENT AND IMPLEMENTATION OF A CORPORATE INFORMATION SYSTEM AT THE AvtoVAZ INDUSTRIAL ENTERPRISE

  D.Y. Zorkin , А.А. Bognyukov , Т. Е. Kozhanova

  2026-02-27

  Abstract ▼

  In the context of global industrial digitalization, the development and implementation of corporate information systems (CIS) have become strategically critical for enhancing operational efficiency and competitiveness of enterprises. This study examines the integration case of the ERP system "1C: Enterprise Management" at the AvtoVAZ plant – a key player in the Russian automotive industry. The research aimed to optimize management and production processes through the automation of planning, resource accounting, and coordination of cross-functional interactions. The methodological framework combined analytical, graphical, and comparative approaches, as well as practical testing of solutions in the "1C" software environment. The focus was on designing algorithms for managing production cycles, forming resource specifications, and configuring planning scenarios. The study developed demand forecasting models, analyzed production capacities, and balanced output based on model prioritization (Lada Granta, Vesta, Largus). The system implementation reduced order processing time by 30%, minimized warehouse downtime by 18–22% through synchronized logistics schedules, and improved quality control accuracy via integrated diagnostic tools (CAN-bus, spectrophotometry). Special emphasis was placed on overcoming institutional and technological barriers, including modernizing outdated planning methods, training employees in ERP interfaces, and deploying hybrid cloud solutions to ensure system scalability. The practical significance of the research was confirmed by achieving resource allocation transparency, reducing operational costs, and forming an adaptive production strategy aligned with market dynamics. The results demonstrate that CIS implementation not only optimizes current business processes but also lays the foundation for sustainable enterprise development in the digital transformation era. The acquired experience can be extrapolated to other engineering and industrial enterprises facing challenges in management automation and data integration under competitive pressure. Future research prospects involve analyzing the long-term effects of ERP system adoption, including their impact on innovation potential and supply chain ecosystems.

• METHODOLOGY FOR EVALUATION AND SELECTION OF PLM-SYSTEMS IN THE DIGITAL TRANSFORMATION OF A MACHINE-BUILDING ENTERPRISE

  P.А. Voronin, А.М. Belevtsev, F.G. Sadreev

  6-15

  2022-11-01

  Abstract ▼

  As part of the transition to the sixth technological order, the question of effective implementation of the digital transformation of the enterprise is acute for industrial enterprises. To do this, enterprises need to ensure the transition to process management, automate business processes and integrate all processes, applications and data on a single platform. There is a problem of choosing a way to combine information flows between various software tools in the enterprise, one of the solutions is the use of a PLM system. With a discrete type of production, their use is difficult due to the large number of software solutions in the main, organizational, supporting and business development processes. In this regard, it is necessary to determine the optimal system that would meet all the necessary criteria for building a single platform for a "seamless" production process. There are a large number of PLM systems on the market that implement a certain number of functional appointments. The choice of a PLM system should be based on the satisfaction of an interconnected set of enterprise requirements, which are determined based on business processes. This will eliminate most unsuitable software solutions. At the same time, a PLM system that has the widest functionality may not meet the requirements for creating a system for ensuring integration with business process automation systems, as well as economic, social, political and other requirements. Therefore, an individual list of criteria is compiled for each enterprise in accordance with the field of activity, the type of production, the availability of various software, the existing level of automation and other parameters. The article proposes a methodology for choosing PLM systems for a radio-electronic engineering enterprise, based on the analysis of business processes and determining the requirements of the enterprise, monitoring and determining the functional purposes of PLM systems and determining the optimal option based on the hierarchy analysis method. Obtaining an integrated assessment of certain criteria and software solutions options will allow an objective choice of the optimal PLM system for a particular enterprise. The use of the methodology will speed up and improve the quality of the PLM system selection process for a certain enterprise in the conditions of transition to the sixth technological order and industry 4.0.