Особливості реалізації ризик-орієнтованого підходу при формуванні цільового профілю безпеки інфокомунікаційної системи

Abstract

The study analyzes the ways of implementing a risk-oriented approach to form a target security profile of an information and communication system. Based on the approaches of international standards, the procedure for implementing the risk management process is given, the final result of which is a formed target security profile. The study analyzes the content of each of the stages of risk management - identification, analysis, assessment, risk treatment.