AXBOROT XAVFSIZLIGINI TA'MINLASHNING ZAMONAVIY TAMOYILLARI VA USULLARI
Keywords:
Kalit so‘zlar: axborot xavfsizligi, CIA modeli, ISO/IEC 27001, NIST Cybersecurity Framework, kiberxavfsizlik, risklarni boshqarish, Zero Trust, xavfsizlik madaniyati.Abstract
Mazkur maqolada axborot xavfsizligini ta’minlashning zamonaviy tamoyillari va usullari kompleks tarzda tahlil qilinadi. Xususan, axborotning maxfiyligi, butunligi va mavjudliligini ifodalovchi CIA modeli, axborot xavfsizligini boshqarish tizimlari (ISMS), kiberxavfsizlik risklarini boshqarish, texnik himoya mexanizmlari, inson omili va xavfsizlik madaniyati, shuningdek, Zero Trust arxitekturasi ko‘rib chiqiladi. Tadqiqotda axborot xavfsizligining alohida texnik choralar majmuasidan tashkiliy, texnik va insoniy omillarni o‘zida mujassam etgan, uzluksiz boshqariladigan tizimli jarayonga aylanish tendensiyasiga alohida e’tibor qaratiladi.
Tahlil natijalari shuni ko‘rsatadiki, kiberhujumlarning tobora murakkablashuvi, masofaviy ishlash amaliyotining kengayishi va bulutli texnologiyalarning ommalashuvi xavfsizlik siyosatini takomillashtirish, xodimlarning axborot xavfsizligi bo‘yicha kompetensiyalarini oshirish hamda me’yoriy-huquqiy bazani rivojlantirish zaruratini kuchaytirmoqda. Kelgusida sun’iy intellekt asosida kiberxavflarni aniqlash, xavfsizlik hodisalariga avtomatlashtirilgan javob choralarini qo‘llash va Zero Trust tamoyillarini keng joriy etish axborot xavfsizligini rivojlantirishning ustuvor yo‘nalishlaridan biri bo‘lishi kutilmoqda.
References
1. Whitman, M. E., Mattord, H. J. Principles of Information Security. 6th ed. Cengage Learning, 2018.
2. ISO/IEC 27001:2022. Information security, cybersecurity and privacy protection — Information security management systems — Requirements. International Organization for Standardization.
3. NIST. The NIST Cybersecurity Framework (CSF) 2.0. National Institute of Standards and Technology, 2024.
4. Verizon. Data Breach Investigations Report (DBIR). Verizon Business, 2023.
5. NIST SP 800-207. Zero Trust Architecture. National Institute of Standards and Technology, 2020.
6. ENISA. Threat Landscape Report. European Union Agency for Cybersecurity.
7. NIST SP 800-53 Rev. 5. Security and Privacy Controls for Information Systems and Organizations. National Institute of Standards and Technology, 2020.
