INFORMATION SECURITY FOR HOTELAND RESTAURANT BUSINESSES

Abstract

The article examines the issues of information security of hospitality and restaurant enterprises (HoReCa) in the context of the digital transformation of the industry. The modern hospitality industry is undergoing a transition from traditional services to high-tech ecosystems, which is accompanied by the active implementation of automated management systems, CRM systems and cloud services. This, in turn, creates new threat vectors, making hospitality establishments attractive targets for cybercriminals due to the accumulation of significant amounts of personal and payment data of customers. The purpose of the article is a comprehensive study of the current state of information security in the hospitality and restaurant sector, the identification of special threats and the development of practical recommendations for building an effective system for protecting the enterprise's information resources in the context of the digitalization of the industry. The study uses systems analysis methods to classify threats, as well as comparative analysis to assess the effectiveness of modern software security solutions. The author has analyzed in detail the specifics of information flows in the hospitality and restaurant business. It is emphasized that a special place in the threats to information security in the hotel and restaurant business is occupied by technical vulnerabilities of outdated software and the human factor, since a large number of seasonal personnel increases the risks of internal threats. It has been established that in wartime conditions, Ukrainian hotels and restaurants face hybrid threats, where cyberattacks can be combined with data collection. Based on the analysis, the authors proposed a conceptual model of the security system "Network Security System for the Hospitality Industry". The key feature of the developed architecture is its cloud orientation, which is critically important for ensuring the continuity of business processes in conditions of energy instability and physical threats to server equipment in Ukraine. The implementation of the proposed model allows minimizing capital expenditures on IT infrastructure, solving the problem of the "human factor" through the automation of security policies, and ensuring the protection of both corporate data and guest privacy