Information system. What is an information system? Definition, signs and features

The article by Nikolai Mikhailovsky, published in this issue of the journal, rightly notes the confusion in IT terminology. This confusion covers not only the concepts of "information system" (IS) and "IP architecture", it is not at all harmless and often prevents in practice from clearly defining what is the subject of development in a specific project: IS, only its KSA (see below) or the whole system (AC)?

To try to clarify the matter, below are key definitions from regulatory documents and, by comparison, from more general sources. The definitions are selected from the working materials of the author of this note, which were an addition to the main materials of courses for specialists and managers. (This explains the presence of comments and the free arrangement of the material in this note - after all, this is not a glossary!) That is why it is said about it: practice has repeatedly shown that a glossary is not enough either. Creating a common “conceptual space” —for at least ten course participants — requires another half hour to an hour of discussion to get the same understanding of things like “system”, “IS” and “CSA”. Finally, with regret, we have to note that outside of the note there was material that could clarify what “System engineering” is, software architecture and other important processes and subjects of design, design and use of systems.

System:

A complex consisting of processes, hardware and software, devices and personnel capable of meeting the established needs or goals ().

Note: close enough to the definition of an automated system (AS) in GOST 34.

Automated system (AS):

In the process of functioning, an automated system is a combination of a set of automation tools, organizational, methodological and technological documents and specialists who use them in the course of their professional activities. (From the guidelines RD 50-680-88 of the GOST 34 series of standards for automated systems (AS).)

A comment.
Recent years have been marked by a qualitative expansion of the meaning of the term "system", reflected in the documents of international committees and professional communities focused on IT. There is a transition to an interpretation that is even broader than indicated in, due to the explicit inclusion of components of other types (materials, methods, etc.). In this regard, the relevance of a broader use of the term "information management system" (see, for example, c) and a narrower use of the term "information system" (see below) is growing.

Information System (IS):

1) a system designed for collecting, transferring, processing, storing and issuing information to consumers and consisting of the following main components:

• software,
• Information Support,
• technical means,
• service staff ().

2) Information system - The collection of people, procedures, and equipment designed, built, operated, and maintained to collect, record, process, store, retrieve, and display information ().

A comment.
IS is initially considered as a system indifferent to the specific goals of users, similar to a PBX, general-purpose library or station reference service, which provides its information services as a subsystem or an adjacent system to a more general system: an enterprise, city, industry, country, etc. (cm. ). Once again, we note that too often IS is understood as a variety of things - from KSA to AC.

The standards have a clear definition of the technical concept of "IT system", which is often required to be used instead of IS. So in GOST R ISO / MEK TO 10000-1-99 it is determined

Information technology system (IT system):

A collection of information technology resources providing services over one or more interfaces. (This is close to the concept of "a complex of automation tools" in the methodological instructions RD 50-680-88 from GOST 34, where the main provisions of this ND complex are given.)

A set of automation tools for an automated system; KSA AC:

The collection of all components of the speaker, with the exception of people ().

Sources of(which are not named directly in the text)

1. Webster's New World Dictionary of Computer Terms, Fourth edition, 1993.
2. GOST 34.003-90. Information technology. A set of standards and guidelines for automated systems. Terms and Definitions.
3. D.Meister, J.Rabido, Engineering and psychological assessment in the development of control systems. "Soviet Radio", M. 1970.
4. The Big English-Russian Polytechnic Dictionary, M., "Russian language", 1991.
5. Information systems in economics: Textbook / Ed. Prof. V.V. Dick. - M .: Finance and Statistics, 1996.
6. GOST R ISO / IEC 12207-99. Information technology. Software life cycle processes. STATE STANDARD OF RUSSIA. Moscow, 1999.

Zinder Evgeny Zakharovich,
chief editor of the magazine "DIS", director of the analytical and design bureau "Group 24".
You can write to him at the addresses:

Introduction ……………………………………………………………………………… .2

1. Information system and its types …………………………………………… ... 3

2. Composition of automated information systems …………………………… 9

3. Technological process of information processing ………………………………… .16

4. The role of information technology in the design, operation and modification of information systems ……………………………………………………… 20

5. CASE-technologies ……………………………………………………………… ... 22

Conclusion …………………………………………………………………………… ... 28

List of used literature ……………………………………………… ..29

Introduction

The 21st century, from which the third millennium begins, has thrown down a challenge to mankind in the form of pervasive international communications, the world wide web of the Internet and the emergence of a virtual economy. And who today can say with complete confidence that, leaving the XXI century. will not bring to humanity a more serious threat in the form of the emergence of "machine (ie, electronic) intelligence" and "man-machine" economy? XXI century. provides us with an opportunity to look at the development of the economy since its inception, as well as meaningfully look at the future of the economy and humanity.

Using communication facilities, you can, without leaving your home, manage technological lines at production or financial and commercial activities of an enterprise, keep accounting records, study remotely at an educational institution, read books in a library, buy goods, perform banking, stock exchange and other financial transactions, etc. Appearance at the end of XX century. information technology has led to the emergence of the most profitable business - the interactive business.

It can be said with full confidence that in the middle of the XXI century. the leaders of the world economy and international trade will be those countries that will possess high technology and knowledge-intensive industries. This means that the export of Russian oil, minerals, trade in arms and heavy machine-building products by Russian firms will occupy one of the last places in international trade and will no longer provide the income that Russia had at the end of the 20th century. ...

In a market economy, the approach to management is radically changing, from functional to business-oriented, and the role of information technologies is also radically changing. The focus on business process-based management provides a competitive advantage for an organization in a highly competitive environment, and business process-based management cannot be effectively implemented without the use of information technology and systems.

1. Information system and its types.

Information system is an interconnected set of tools, methods and personnel used to store, process and issue information in order to achieve the set goal. The modern understanding of the information system involves the use of a computer as the main technical means of processing information. It is necessary to understand the difference between computers and information systems. Computers equipped with specialized software are the technical base and tool for information systems. An information system is inconceivable without personnel interacting with computers and telecommunications.

In the normative legal sense, an information system is defined as "an organizationally ordered set of documents (an array of documents) and information technologies, including the use of computer technology and communications that implement information processes" [RF Law "On Information, Informatization and Information Protection" dated 20.02.1995, No. 24-FZ].

Processes that ensure the operation of an information system for any purpose can be conventionally represented as consisting of the following blocks:
input of information from external or internal sources;
processing input information and presenting it in a convenient form;
output of information for presentation to consumers or transfer to another system;
feedback is information processed by the people of a given organization to correct the input information.

In general, information systems are determined by the following properties:
1) any information system can be analyzed, built and managed on the basis of general principles of building systems;
2) the information system is dynamic and developing;
3) when building an information system, it is necessary to use a systematic approach;

4) the output of the information system is information on the basis of which decisions are made;

5) the information system should be perceived as a man-machine information processing system.

The introduction of information systems can contribute to:
obtaining more rational options for solving management problems through the introduction of mathematical methods; freeing workers from routine work due to its automation; ensuring the reliability of information; improving the structure of information flows (including the document management system); providing consumers with unique services; reducing the cost of production of products and services (including information).

The type of information system depends on whose interests it serves and at what level of management. By the nature of the presentation and the logical organization of the stored information, information systems are divided into factual, documentary and geoinformation systems.

Factographic information systems accumulate and store data in the form of multiple instances of one or more types of structural elements (information objects). Each of such copies or some of their aggregate reflects information on any fact, event separately from all other information and facts.

In documentary (documented) information systems a single element of information is a document that is not divided into smaller elements, and the information during input (input document), as a rule, is not structured, or is structured in a limited way. For the entered document, some formalized positions can be established (date of manufacture, performer, subject).

In geographic information systems the data is organized in the form of separate information objects (with a certain set of details) tied to a common electronic topographic basis (electronic map). Geographic information systems are used for information support in those subject areas, the structure of information objects and processes in which has a spatial and geographical component (transport routes, utilities).

In fig. 1.1 presents the classification of information systems according to the characteristics of their functional subsystems.

Rice. 1.1. Functional classification of information systems.

In the economic practice of industrial and commercial objects, typical activities that determine the functional attribute of the classification of information systems are production, marketing, financial, personnel activities.

Classification of information systems by management levels
Allocate:
information systems of the operational (operational) level - accounting, bank deposits, order processing, ticket registration, salary payments; information system of specialists - office automation, knowledge processing (including expert systems);
tactical level information systems (middle level) - monitoring, administration, control, decision making;
strategic information systems - formulation of goals, strategic planning.

Information systems of the operational (operational) level
An information system of the operational level supports executing specialists by processing data on transactions and events (invoices, invoices, salaries, loans, flow of raw materials and supplies). The purpose of the information system at this level is to respond to inquiries about the current state and track the flow of transactions in the firm, which corresponds to operational management. To cope with this, the information system must be easily accessible, continuously operational and provide accurate information. The operational level information system is the link between the firm and the external environment.

Information systems of specialists. Information systems at this level help data scientists improve the productivity and productivity of engineers and designers. The task of such information systems is to integrate new information into the organization and help in processing paper documents.
Office Automation Information Systems due to their simplicity and versatility, they are actively used by employees of any organizational level. Most often they are used by workers of average qualification: accountants, secretaries, clerks. The main goal is to process data, improve their efficiency and simplify clerical work.

These systems perform the following functions: word processing on computers using various word processors; production of high quality printed products; archiving documents;
electronic calendars and notebooks for business information; electronic and audio mail; video and teleconferences.

Knowledge processing information systems, including expert systems, they absorb the knowledge necessary for engineers, lawyers, scientists in the development or creation of a new product. Their job is to create new information and new knowledge.

Tactical information systems (middle level)
The main functions of these information systems are: comparison of current performance with past performance; preparation of periodic reports for a certain time (and not issuing reports on current events, as at the operational level); providing access to archival information, etc.

Decision support systems serve semi-structured tasks, the results of which are difficult to predict in advance (they have a more powerful analytical apparatus with several models). Information is obtained from management and operational information systems. Characteristics of decision support systems:
provide solutions to problems, the development of which is difficult to predict;
equipped with sophisticated modeling and analysis tools;
allow you to easily change the setting of the tasks being solved and the input data;
are flexible and easily adapt to changing conditions several times a day; have a technology that is as user-centered as possible.

Strategic information systems.Strategic information system- a computer information system that provides support for decision-making on the implementation of promising strategic development goals of the organization. There are known situations when the new quality of information systems forced to change not only the structure, but also the profile of firms, contributing to their prosperity. However, in this case, an undesirable psychological situation may arise, associated with the automation of some functions and types of work, since this can put some of the workers in a difficult situation.

An information system (IS) is any organized system for collecting, storing and transmitting information. More deeply, it is the creation of additional sources that people use to obtain, filter and disseminate data.

The definition of "information systems" is associated with computer technology. In other words, it is a kind of complex, implying the work of people and computers, as a result of which information is processed or interpreted. This term is sometimes used in a more limited sense - to refer to the software required to run a computer database, or as a definition of a computer component.

But the emphasis is usually on information systems, the definition of which includes the final surface layer - users, processors, inputs, outputs, and the aforementioned communication networks. Any specific IS is aimed at supporting operations, management and decision making.

The definition of an information system can be reduced to the fact that it is information and communication technologies (ICT) that are used by various organizations, as well as the way in which people interact with these technologies in support of business processes. Some researchers make a clear distinction between information and computer systems and business processes. ICs typically include, but are not directly related to, a computer component.

Information systems, the definition of which we will consider later in the article, differ from business processes in that they only help to control the effectiveness of the latter.

Some scholars have argued for the benefits of IP as a specific type of workflow. However, it is a system in which people or machines perform specific functions and activities, using resources to produce specific products or services for customers. While the information system is, as already mentioned, an intellectual complex whose activities are devoted to the collection, transmission, storage, search, processing and display of information.

Information system - what is it?

Thus, ICs are closely related to data transmission systems on the one hand and workflow on the other. They represent a form of interconnection in which data is presented and processed as a form of social memory. The information system (the basic concepts, definitions associated with it, we consider in the article) can also appear as a semi-official language that supports the creation of human decisions and actions. It is a major area of ​​study for Organizational Informatics.

Basic concepts, definitions, classification of information systems

There are different types of ICs, for example:

• transaction processing;
• decision support;
• knowledge or learning management;
• database management.

Of decisive importance for most information systems are information technologies, usually designed to perform tasks for which the human brain is not very well suited. For example, processing large amounts of information, performing complex calculations, and managing multiple simultaneous processes.

Information technology is a very important and flexible resource available to leaders. Many companies are now recruiting a Chief Executive Officer for these issues. The CTO can also act in this role.

Equipment

The definition of "the essence of an information system" implies the presence of six components that must be combined to create it. And the first is hardware.

This term refers to technology. And it means the computer itself, which is often referred to as the central processing unit (CPU), and all the hardware associated with it to support the operation. Among the auxiliary equipment required for the creation of ICs, one can mention input and output devices, data storage devices, and communication devices.

Software

The next component is software. This term refers to the computer programs and manuals (if any) that support them. There are computer applications, machine-readable instructions, that direct electrical circuitry within the hardware of a system and cause it to function in such a way as to produce useful information from the received data.

Programs are usually stored on some machines, sometimes on removable media.

Data

Another component is data - facts, which are used by programs to obtain useful information. Like programs, data is usually stored in machine-readable form on disk or other storage device until the computer needs it.

The definition of the concept of "information systems" is not possible without taking into account the presence of facts that are processed and systematized.

Procedures

Another component that defines the essence of the described definition is procedures. This term refers to the policy that governs the operation of a computer system. These can be certain requirements and rules on the basis of which the IS functions and develops.

People

Every system also needs people if it is to be useful in some way. Moreover, people are often the most significant element. And this is probably the component that most affects the success or failure of information systems. This item includes not only users, but also those who operate and maintain computers, maintain data and networks, etc.

Feedback

Another component of the IS is feedback (although it is not necessary for functioning).

As noted, data acts as a bridge between hardware and humans. This means that the information we collect is only scattered information until it is systematized. At this stage, the data becomes information and falls into the definition of an information system.

The use of information systems directly depends on their types.

Pyramid

Thus, the classical type of IP is often described in various textbooks. In the 1980s, it was presented as a pyramid that reflected the hierarchy of the organization.

As a rule, transaction processing systems were at the bottom of the pyramid, the management of information systems, making decisions to support the system, was located just above, and the executive IS model ended at the top.

This pyramid model remains useful today, since it was the first to formulate a number of new technologies, but some of its components may not be relevant, although they fall under modern information systems, the definition of which we are trying to formulate. Examples of such ICs can be as follows:

• data warehouses;
• enterprise resource planning schemes;
• expert;
• search engines;
• geographic information;
• global information system;
• office automation.

Computer ICs

A computer information system is created using computer technology to perform some or all of the scheduled tasks. Its main components are:

1. A piece of hardware that includes a monitor, processor, printer, and keyboard that work together to receive, process, display data and information.
2. Software - programs that enable hardware to process data.
3. Databases, which are a repository of related files or tables containing relevant data.
4. Networks, which are a nexus system that allows a variety of computers to allocate resources.
5. Procedures, which are a set of commands designed to combine the above components in order to process information.

Information systems, the definition of which is presented in the article, classifies the first four components (hardware, software, databases and networks) into one complex, which is known as an information technology platform.

IT workers can then use them to create ICs that monitor security, risk, and data management. These activities are known as information technology services.

Information systems development

Information technology departments in large organizations tend to greatly influence the development, use, and application of information technology. A number of techniques and processes can be used to develop and use IP. Many developers now use an engineering approach called the Software Life Cycle (SDLC), which is a systematic way of developing an information system through stages that occur in a specific sequence.

IS can be developed internally or externally. This agreement can be achieved by outsourcing specific components or the entire system. A technologically realized environment for recording, storing and distributing linguistic expressions, for drawing conclusions from such expressions - all this includes the concept of "information systems".

Terms and definitions related to IP are rather complex and do not have a narrow focus, so they can be used in almost any area. But there are also specific areas of their application.

Geographic Information Systems: Definition

Examples of narrower classifications are geographic information systems (GIS) and earth information systems. They allow collecting, storing and analyzing and graphical visualization of spatial data. Their development is carried out in several stages, which include:

1. Recognition and specification problems.
2. Collection of information.
3. Specification requirements for the new system.
4. System design.
5. System architecture.
6. Implementation.
7. Review and maintenance.

Academic discipline

The field of research on the concept of IP covers a variety of topics, including systems analysis and design, computer networks, information security, database management and decision support systems.

The definition of "classification of information systems" currently does not have a unified interpretation. It implies some data management operations, with a practical and theoretical solution to the problems of data collection and analysis. Depending on the industry, this can be business application productivity tools, software programming and implementation, e-commerce, electronic media use, data mining and decision support.

Information systems (the definition of this concept was given earlier), serve to unite economics and informatics. They are a field for the study of computers and algorithmic processes, including their principles, software and hardware designs, applications, and their impact on society. Many modern scientists have discussed the nature and foundations of information systems, which have their roots in other reference disciplines - for example, computer science, engineering, mathematics, management, cybernetics, etc.

IP can also be defined as the collection of hardware, software, data, people and procedures that work together to produce quality information. They are directly related to information technology, computer science and business. The study of theory and practice related to social and technological phenomena that determine their development, use and impact on human life is the area of ​​interest of those who study information systems.

The definition to which the article was devoted is also used to describe the organizational function that applies this knowledge to industry, government agencies, and non-profit organizations. They often boil down to interactions between algorithmic processes and technologies.

The field of study of IP includes the study of theory and practice related to social and technological phenomena that determine the development, use and impact of information systems in an organization and society. In a broad sense, the term "information systems" means a scientific area of ​​research that examines the strategic, managerial and operational activities to participate in the collection, processing, storage, dissemination and use of information and related technologies in society and organizations.

The term information systems is also used to describe the organizational function that applies this knowledge to industry, government agencies, and non-profit organizations. IP is often referred to as interactions between algorithmic processes and technologies. These interactions can occur within or outside organizational boundaries. An information system is a technology that various organizations use for their own purposes.

Experts determine what constitutes an interconnected set of tools, and, in addition, the methods and personnel that they use to store, process and issue information in order to solve a specific problem.

Such systems can have different purposes and scales. Also, they differ in the degree of coverage in various areas of enterprise activity and can be designed not only to keep accounting or warehouse records in them, but also to take into account finances, carry out production accounting, and control the document flow of the enterprise.

Regardless of its purpose, all information systems have a number of properties that are common to them.
Any information system in our time involves the use of computers as the main technical means for processing information. They, along with the specialized programs installed on them, are the instrument and the technical base of such a system. Thus, the basis of the system is the means for storing and accessing data. However, they are intended for use by the end user who is not a computer scientist, so they include client applications that provide an intuitive interface for him.

These systems can be factual or documentary. The first ones are designed to search for unambiguous answers to queries and for a completely unambiguous solution to the task. These include a variety of reference and information systems, information retrieval systems and systems that deal with operational data processing. The latter solve such problems as, for example, accounting, production management and the like.
Unlike factual systems, documentary systems solve problems that do not provide unambiguous answers to questions. An example is the systems of electronic document management that have recently become popular at enterprises. In some cases, the systems are of a mixed type.

Any such system can have a different scale. Distinguish between individual systems or desktop, network, when they include several users and, the largest systems, enterprise scale.
Modern enterprises can no longer be imagined without such a system. It does not matter in what area the activity of the enterprise is concentrated and what scale it is, its information system is practically the core that allows you to effectively manage production, trade or provide services in a timely manner and with high quality. It simplifies the solution of managerial tasks, frees a number of employees from routine work, reduces the likelihood of errors, reduces the number of paper documents and, most importantly, allows you to significantly reduce costs.
That is why, at any modern enterprise, everything related to the information system and ensuring its uninterrupted functioning is the subject of special control by the top officials!

There are about 100 state information systems in the Russian Federation, they are subdivided into federal and regional. An organization operating with any of these systems is required to comply with the data protection requirements that it processes. Depending on the classification, different requirements are imposed on different information systems, for non-compliance with which sanctions are applied - from a fine to more serious measures.

The operation of all information systems in the Russian Federation is determined by the Federal Law of July 27, 2006 No. 149-FZ (as amended on July 21, 2014) "On Information, Information Technologies and Information Protection" (July 27, 2006). Article 14 of this law provides a detailed description of GIS. Operators of state information systems processing information of limited access (which does not contain information constituting a state secret) are subject to the requirements set forth in the Order of the FSTEC of Russia dated February 11, 2013 No. 17 “On approval of requirements for the protection of information that does not constitute a state secret contained in state information systems ”.

Recall that an operator is a citizen or a legal entity that operates an information system, including processing information contained in its databases.

If the organization is connected to the state information system, then FSTEC Order No. 17 obliges to certify the system, and only certified information security means (with valid FSTEC or FSB certificates) should be used to protect information.

It is not uncommon for the operator of an information system to mistakenly classify it as a GIS, when it is not. As a result, redundant security measures are applied to the system. For example, if by mistake the operator of the personal data information system classified it as a state one, he will have to fulfill more stringent requirements for the security of the information being processed than required by law. Meanwhile, the requirements for the protection of personal data information systems, which are regulated by FSTEC Order No. 21, are less stringent and do not oblige to certify the system.

In practice, it is not always clear whether the system to which it is necessary to connect is state-owned, and, therefore, what measures must be taken to build information protection. Nevertheless, the plan of inspections by regulatory authorities is growing, fines are steadily increasing.

How to distinguish GIS from non-GIS

The state information system is created when it is necessary to ensure:

• implementation of the powers of government agencies;
• information exchange between government agencies;
• achievement of other goals established by federal laws.

It is possible to understand that the information system belongs to the state using the following algorithm:

1. Find out if there is a legislative act prescribing the creation of an information system.
2. Check the availability of the system in the Register of Federal State Information Systems. Similar registers exist at the level of the constituent entities of the Federation.
3. Pay attention to the purpose of the system. An indirect sign of the classification of the system as a GIS will be the description of the powers that it implements. For example, each administration of the Republic of Bashkortostan has its own charter, which, among other things, describes the powers of local self-government bodies. The IS "Accounting for citizens in need of housing in the territory of the Republic of Bashkortostan" was created to implement such powers of administrations as "the adoption and organization of the implementation of plans and programs for the integrated socio-economic development of the municipal district", and is a GIS.

If the system involves the exchange of information between government agencies, it is also highly likely to be government (for example, a system of interdepartmental electronic document management).

This is a GIS. What to do?

FSTEC Order 17 prescribes the following measures to protect information for GIS operators:

• formation of requirements for the protection of information contained in the information system;
• development of a system for protecting information of the information system;
• implementation of the information protection system of the information system;
• certification of the information system in accordance with information security requirements (hereinafter - certification of ISPD) and putting it into operation;
• ensuring the protection of information during the operation of the certified information system;
• ensuring the protection of information during the decommissioning of a certified information system or after a decision has been made to end information processing.

Organizations that are connected to state information systems must perform the following actions:

1. Conduct an IP classification and identify security threats.

IP classification is carried out in accordance with clause 14.2 17 of the FSTEC order.

Information security threats are determined based on the results

• assessing the capabilities of violators;
• analysis of possible vulnerabilities of the information system;
• analysis (or modeling) of possible ways to implement threats to information security;
• assessing the consequences of violation of information security properties (confidentiality, integrity, availability).

2. Formulate requirements for the information processing system.

System requirements should contain:

• the goal and objectives of ensuring the protection of information in the information system;
• security class of the information system;
• a list of regulatory legal acts, methodological documents and national standards that the information system must comply with;
• list of objects of protection of the information system;
• requirements for measures and means of information protection used in the information system.

3. Develop a system for protecting the information of the information system.

To do this, you need to carry out:

• design of the information security system of the information system;
• development of operational documentation for the information protection system of the information system;
• prototyping and testing of the information security system of the information system.

4. Carry out the implementation of the information protection system of the information system, namely:

• installation and configuration of information security tools in the information system;
• development of documents defining the rules and procedures implemented by the operator to ensure the protection of information in the information system during its operation (hereinafter - organizational and administrative documents for the protection of information);
• implementation of organizational measures to protect information;
• preliminary tests of the information security system of the information system;
• trial operation of the information protection system of the information system;
• checking the built information protection system for vulnerability;
• acceptance tests of the information security system of the information system.

5. To certify ISPDn:

• conduct qualification tests;
• get your hands on a certificate of conformity.

There is a widespread opinion that organizational and administrative documents are sufficient to pass the inspection by the regulatory authorities, therefore GIS operators often neglect the implementation of security measures. Indeed, Roskomnadzor pays close attention to documents and the implementation of organizational and administrative measures to protect personal data in an organization. However, if questions arise, specialists from the FSTEC and the FSB can be involved in the audit. At the same time, the FSTEC looks very closely at the composition of the technical protection of information and checks the correctness of the compilation of the threat model, and the FSB checks the implementation of the requirements regarding the use of cryptographic protection of information.

Oleg Necheukhin, Information Systems Security Expert, "Kontur-Security"