INFORMATION SECURITY OF THE ORGANIZATION AS A FACTOR FOR STRENGTHENING THE EMPLOYER BRAND

Abstract

The article examines the relevance of forming and strengthening the employer's brand in the context of increased competition for talent and growing risks in the field of information security in the context of a full-scale war. Objective. The object is international information security standards in Ukraine and strengthening the employer’s brand. Methods of scientific knowledge: descriptive, abstract-logical, generalization, comparison. Results. The authors identified the key elements that are the basis of the employer brand, taking into account information security requirements. It is noted that the main direction of ensuring information security is the creation of a complex system of information protection, which includes a complex of technical and organizational measures. The issues of certification of information security management systems as an indicator of the effectiveness of management of the organization's business processes, information risks, stability, and reliability of the company's development are considered. A sequence of actions for the implementation of information security standards and a system of metrics for evaluating the effectiveness of information security standards as factors for strengthening the employer's brand are proposed. The paper substantiates that when forming the employer's value proposition (EVP) it is advisable to add compliance with information security standards to the set of advantages. Scientific novelty. For the implementation of information security standards in order to strengthen the company's employer brand, an algorithm is proposed, which consists of the following stages: 1. Assessment of the company's need for information security. 2. Determination of risk zones. 3. Development of an implementation plan. 4. Organization of training. 5. Creation of a checklist for compliance with information security standards in all divisions. Practical significance. To evaluate the effectiveness of the implementation of information security standards, the following metrics are proposed: 1. The number of security breaches. 2. Recovery time. 3. The number of employees who have undergone appropriate training. 4. Number of viruses and malware. Demonstrating a secure work environment and ensuring that employees' personal data is protected is an important aspect of an effective EVP that meets information security requirements.