Обґрунтування вибору підходу до оцінювання ризиків інформаційної безпеки

Abstract

This work is devoted to comparing four internationally recognized standards – BSI Standard 200-3, ISO/IEC 27005:2022, IEC 31010:2019, and NIST SP 800-30 Rev. 1. By utilizing the Analytic Hierarchy Process (AHP), this research evaluates the strengths and weaknesses of each standard, providing insights into their applicability and effectiveness in different organizational contexts. The findings contribute to the selection of the most suitable risk assessment methodology.