The article studies the current state of cyber resilience issues in data cybersecurity management in financial organizations. The modern aspects of the multiple increase in the cyber activity of fraudsters in all spheres of the Russian economy, especially in the activities of financial organizations, have been established. It is determined that for data protection in this sector it is necessary to develop and implement the concept of cyber resilience, which includes not only methods of preventing attacks, but also preparation for them, along with a thorough and comprehensive analysis of the blunders made, as well as the restoration of the automated management system of the financial organization. Separately, it was found that in order to avoid negative consequences, it is advisable to focus on the development of a continuous cycle of cyber resilience, along with improving the holistic cybersecurity risk management system of the financial organization. The circumstance of contradictory interaction of IT quality management, cybersecurity management and business continuity management systems in many financial organizations on common processes of risk management, problems, incidents, training and awareness raising has been established, which leads to the problem of timely response to cross-block incidents that have a key impact on confidentiality, integrity and availability of information. It is proposed to use the developed concept of achieving cyber resilience as a target state of the organization in five steps, which is based on synchronization of actions and synergy of IT and IS experts in the development of a reliable IT infrastructure with a high level of security and fault tolerance of the cyber security management system of a financial organization.
Oleg Boychenko (Tue,) studied this question.