METHODOLOGY FOR ASSESSING THE LEVEL OF SECURITY OF SOFTWARE AND HARDWARE SOLUTIONS OF AN INTEGRATED SYSTEM FOR PROTECTING INFORMATION OF AN ENTERPRISE

Nasedkin P. N., Bazilevskiy M. P.

The article proposes a method for assessing the level of security of the subsystem of software and hardware solutions (SHS) of an integrated information security system (IISS). A model of the relationship between the objects of influence and the main elements (complexes, subsystems) of the means of protecting information of the SHS level has been developed. Based on the database of threats of the Federal Service for Technical and Export Control (FSTEC), the objects of impact were optimized. In accordance with the SHS level model and the assessments of information security auditors, the efficiency was determined for each level of functionality of the subsystems and for each level of the subsystem. In accordance with the effectiveness assessments for the elements of the SHS, an assessment of the overall level of security of the SHS with the possibility of determining the key elements of the SHS that affect this level is proposed.

Keywords:level efficiency, objects of influence, subsystems, complexes, level of functionality, level assessment