Обґрунтування вибору ефективної шкали оцінки інформаційних ризиків

Abstract

This paper addresses the critical challenge of selecting an optimal scale for information security risk assessment in modern organizational environments. While traditional 3-point and 5-point scales offer simplicity, they often lack the necessary detail for large-scale organizations facing diverse and complex threats. The study justifies the transition to a 9-point scale, grounding its advantages in both mathematical stability and cognitive psychology. Additionally, the study introduces practical models for quantifying incident probability and financial losses using this unified scale.