STRUCTURAL MODEL OF THE LIMITED-ACCESS INFORMATION LEAKAGE CONSEQUENCES ASSESSMENT SYSTEM

Abstract

The article presents a structural model of a system for evaluating the consequences of restricted information leaks, aimed at increasing the level of information security for individuals, society, and the state. The system allows for the automation of the following processes: identification and classification of public (open) information and restricted information; risk analysis with forecasting of potential consequences (harm, damage) from a possible or already occurred leak of personal data, official information, or state secrets (and/or the loss of their physical carriers), while minimizing financial losses and/or other severe consequences; and the formation of a violation registry and a critical information infrastructure object classifier. In accordance with the existing requirements regarding the specific organization of secrecy regimes and access to certain types of classified information, the developed system structure includes a subsystem for evaluating the consequences of personal data leaks (under national and international legislation, including GDPR) and a subsystem for evaluating the consequences of official information and/or state secret leaks. The proposed system ensures the evaluation of the operational effectiveness of information protection systems (comprehensive information protection systems and/or state secret protection systems) of critical infrastructure objects, government authorities, and secret-regime entities, and is intended for use by state experts on secrets, forensic institutions, commissions on official information, and other authorized persons.