DEVELOPING A METHODOLOGICAL APPROACH TO ASSESSING STATE INFORMATION SECURITY

Abstract

The article proposes a methodology for assessing the information security of the state. The object of the study is the information security system of the state. The subject of the study is the development of a methodical approach to the assessment of information security of the state.

Scope of practical use of research results: It is advisable to use the proposed scientific results in conducting research and development works on the creation of intelligent systems for collecting, processing and analyzing information about the state of information security of the state and developing requirements for hardware and software of this type of systems.

The difference between the proposed method and the known ones, which determines its novelty, lies in the possibility of:

– identification and qualitative interpretation of threats to information security;

– simulation of scenarios of extreme situations caused by the realization of threats to information security;

– assessment of risks that have characteristics of several classes and ranking of assets of the information security system of the state according to their degree of criticality;

- carry out an assessment of the number of critically vulnerable assets of the state information security system;

- to substantiate the composition and probability of realization of threats to the information security of the state, capable of causing extreme situations in the information and telecommunications system;

- conducting an assessment of risks from their implementation in systems of information collection, processing and transmission.

The application of the proposed methodology allows to automate the process of analyzing threats to information security and assessing the risks of breaching information security in information collection, processing and transmission systems.