Assessment and Monitoring of the Security of Information Resources as an Emergency Situation

Abstract

Formulation of the problem: control (evaluation) and monitoring of the information protection system (IPS) effectiveness are an integral part of the protected information objects operation process (state information systems, information systems of personal data, significant objects of critical information infrastructure). Imperfection of the control and monitoring means of the IPS together with her the vulnerabilities often leads to computer incidents with protected informatization object subsequent failure and/or degradation of its. One of the effective ways to solve this problem is the organization and implementation of preventive measures. The purpose of the work is reducing the response time and elimination of consequences from a computer incident caused by IPS measures to control (evaluate) the effectiveness. An additional goal is to neutralize information security threats implemented by an external intruder using sociotechnical methods (fishing). Methods: generalization and analysis of the existing regulatory and methodological support for the actions of information security units to carry out control (evaluation) measures, as well as in case of emergency situations and the occurrence of computer incidents. Novelty: the novelty elements is consideration of the event on ISP effectiveness control (evaluation) as a non-emergency situation in the informatization object operation under protect. Result: the necessity of introducing a threat to information security new class – the threat of information resource performance disruption caused by IPS control (assessment) and monitoring of the effectiveness are proved. Practical significance: the results of the work can be used to ensure organizations information resources security when the Center for Information Protection and Special Communication FSS of and territorial security bodies in relation to them measures to assess their security and the ability of bodies (organizations) to resist threats to information security.