Methods and techniques of information security risk management during assessment of information systems

Abstract

This article proposes methods for managing the security risks of information systems. The proposed methods were tried in practice to make an assessment of the risks of information systems in accordance with certain criteria. After the carried-out work has been done, we were able to identify the risks of each of the components of information systems. The practical application of the proposed method has proved that it can possibly be used for calculation of risks of systems.