Training complex to prepare for the practical security audit

Voevodin Vladislav

the analysis of the requirements for training undergraduates in the direction of information security specialization "Audit of information security", on the basis of which it was hypothesized that graduates will be able to form the required competence if the learning process will be implemented practical audit tasks relevant to the real object of audit or as close to the real. The final training business game is based on traditional forms of training sessions, which does not allow to make a real situation. To improve training, it was decided to develop an educational and methodical complex (UMK), which is interconnected by a single purpose private techniques, architecture UMK, hierarchical classification of tasks and the procedure of multi-level synthesis. The implementation of the UMC will ensure the required quality of training of both undergraduates and existing auditors, this is especially important in the audit of critical information infrastructure.

Keywords:audit, information security, business game