Access matrix as a passive element in the protection of information resources

In modern business environment the role of effective governance on the basis of reliable information increases many times is very important. Error management based on insufficient or incorrectly interpreted data, can lead to the collapse of even a large company. Modern, complex and dynamic market environment requires from Russian companies continuous improvement of their management systems and information systems support. One of the main directions of creation of effective system of enterprise management is the application of the process approach to organization and management. Information becomes the most powerful tool in the hands of the manager. Effective management is impossible without information gathering and processing by various methods. The methods of obtaining information are diverse and are not considered in this work. The methods of the targeted distribution of information on the recipients were much more interesting, which is reflected in this work. In this work the author considers a problem of management of access to information resources of the enterprises. The purposes of a control system of access are formulated. Interrelation of the purposes of information security and available threats of safety is defined. It is suggested to use an access matrix as a passive element ofprotection of information resources. The tasks which need to be solved in any control system of access are formulates. A task of an exception of redundancy when carrying out measures ofprotection of information resources is set. A technique offormation of a matrix of access is offered. The procedure of categorization of information, identification of groups of risk, formation ofprofiles of access, fixing of access rights in regulating documents of the organization is described.