Methodology for Ensuring EDI Security

This publication covers the actual issues of developing up-to-date methodological basis for providing security of electronic document management systems.The brief analysis of challenges in ensuring security is given. In particular, the results of the transition from "local" automation to projects covering the entire enterprise, outdated traditions of paper document processing, fear and rejection of current information security systems are presented.Based on the data presented it is possible to conclude that the applicable Russian laws (Federal Law "On Personal Data", Federal Law "On an Electronic Signature", etc.) are sufficient to ensure the security of electronic document interchange services. We would like to separately note the necessity to take into account the Compliance requirements, e.g., ISO 9001, ISO/IEC 27001, ISO/IEC 37301 standards.The represented outcomes can be used in ensuring security of modern electronic document management systems at all stages of the life cycle.