Development of information security policy for distance education services using risk assessment method

Abstract

The paper is devoted to the development of organizational measures of information security pol-icy when providing distance education services. For this purpose, the experience of organizing distance education by higher education institutions in modern conditions is analyzed. The subject of the study is the modular object-oriented dynamic e-learning system Moodle, as a popular tool for providing distance education services. The scheme of structural elements of the e-learning sys-tem Moodle is shown and the classification of methods and means of ensuring information secu-rity in an electronic course, as the main component of the e-learning system, is given. A scheme-process of management and assessment of information security risks when providing dis-tance education services is proposed. Based on it, a model of internal and external violators of in-formation security of a distance education service is built with a ranking of the level of damage of each violator, as well as a model of specific threats to information security when providing dis-tance education services. A set of rules for the information security policy of an electronic course, as an environment for providing distance education services, is proposed.