Enterprise Osint Для Управління Ризиками, Моніторинг Цифрового Сліду Компанії Та Співробітників
Year: 2026
Type: article
Abstract: The object of the study is the process of identifying, interpreting and using open-source data for enterprise cyber risk management under the conditions of an expanding digital perimeter. The problem is that traditional internal monitoring mechanisms do not provide early detection of leaks, compromised accounts, shadow digital assets and behavioral signals connected with the digital footprint of employees. The paper improves the approach to Enterprise OSINT as a continuous cycle of collection, normalization, verification and correlation of external indicators with internal security events. The results include a structural architecture model of Enterprise OSINT, a matrix of threat vectors and detection methods, and a procedure for integrating OSINT data into the ISO/IEC 27001, SIEM and CTI control loop. The proposed results solve the problem of fragmented external monitoring through the combination of technical, organizational and analytical components within a single risk management contour. Their distinctive feature is the focus not only on the company infrastructure, but also on employees digital footprints, partner mentions, leaks in the Surface, Deep and Dark Web, and subsequent false-positive verification. The results are explained by the fact that external data are treated not as background information, but as operational risk indicators suitable for automated validation and prioritization. Practical use is possible in corporate information security systems, SOCs, economic security services and compliance units provided that ethical monitoring policies, response procedures and repeated source verification are in place.
Institution: National University Odesa Law Academy
Language: Ukrainian
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: diamond
OpenAlex ID: W7163003179