Digital Compliance as an Effective Means to Minimize Information Risks

The article describes the prospects of using information technologies in a complex to minimize information risks in a company and describes the digital transformation of compliance control in current conditions. The purpose of the study is to analyze the existing problems of the data protection mechanism and the consideration of information risks in the formation of compliance control in the company. The methods of collecting empirical information and generalizing information and the formal legal method were used. Two approaches to understanding digital compliance are formulated. In accordance with the first, digital compliance (in a narrow sense) provides supervision over employees' compliance with the requirements of legislation and regulations of antimonopoly authorities, letters from the Central Bank of the Russian Federation on compliance control, international ISO standards and national standards Russian Federation GOST R ISO, provisions of local company regulations on digital security and trade secrets. The second approach, digital compliance in the broadest sense of the word, creates an additional system of preventive digital control in the organization by ensuring digital security, new digital solutions in the design of labor relations with employees, automation of part of labor relations and the formation of appropriate digital personnel documentation. The author introduces the following definition of digital compliance as a system of general compliance control over all operational processes related to digital procedures and (or) digital products, working with confidential information and minimizing a wide range of information risks. In the course of the study, the following areas of information technology use in the field of compliance were identified: for the implementation of general information risk management; for building a “digital company” system; when analyzing a large volume of documentation; various sources, including information databases; identification of significant deficiencies in the operation of information systems.