Information security in the world: the case of the Agricultural Social Insurance Fund (KRUS) with particular focus on personal data protection

The information society, in which information is of growing significance, exposes its citizens to a particular category of cyber threats, namely breaches of information security and confidentiality, as well as the illegal use of personal data, which frequently results in identity theft. Therefore, in order to ensure information security, and particularly the protection of personal data, laws and rules have been established to define the manner in which such information is managed, processed, protected and distributed. Since 28 May 2018, both the data controller and the data processor have borne responsibility for breaches of data security. The forms of obtaining and using information are reflected in the applicable legislation. As a result, public entities develop Security Policies – documents that set out procedures and internal rules of conduct. Their purpose is to introduce standards for information security and to engage employees in actively safeguarding data. The main objective of this paper is to present the method of ensuring information security with particular emphasis on the protection of personal data, using the example of the Agricultural Social Insurance Fund (KRUS). Key words: information security, personal data, information, KRUS, personal data protection, security policy.