The Role of Outsourcing in Human Resources Management on the Example of Aeroflot

The article provides a comprehensive analysis of the problem of information security as a dynamic system covering all key stages of the information lifecycle: receipt, storage, transmission and processing. The work goes beyond a theoretical review, offering a structured methodology for risk assessment and management. Special attention is paid to the interrelationship of technical, organizational, managerial and legal aspects of protecting information assets in the context of digitalization. The study presents an original analytical model for quantifying the risks and cost-effectiveness of implemented protective measures. A concrete example with calculations, tables, and diagrams demonstrates the process of threat analysis, calculating potential damage, and justifying investments in information security systems. The results of the work allow us to formulate practical recommendations for building a balanced and economically feasible security system adapted to modern challenges. Using the example of Sberbank, the effectiveness of an integrated risk-based approach has been demonstrated, in which an end-to-end protection loop embedded in the data lifecycle ensures business sustainability in the face of digitalization and geopolitical instability. The study proves that investments in information security for the largest backbone bank are not costs, but a strategic asset that generates measurable economic benefits through damage prevention, operational efficiency and strengthening market confidence. The analysis revealed that the key driver of the return on investment in information security is the balance between the automation of basic processes, the development of a safety culture of personnel and the strategic costs of ensuring technological sovereignty and protection from future threats. The developed quantitative model of risk assessment and cost-effectiveness of protection measures confirms that a mature information security system transforms cyber risks from a source of potential catastrophic losses into a manageable factor of long-term sustainability and competitive advantage of the organization.