Оценкa рисков информационной безопасности коммерческих организаций

Abstract

In the presented method of risk assessment of information security of commercial organizations risk is expressed in the expected monetary losses for a some period. Quantitative risk assessment, expressed in monetary losses, is translated into a qualitative indicator of the overall level of risk and the information security level of the organization, which provides the management of the organization with a understandable result of the procedure.