Matrix Method for Safety Level Assessment

In the modern era of information security, protection of information assets is one of the most urgent tasks, given the complexity of cyber attacks and the increase in the number of potential attackers. As cyber threats become more sophisticated and pervasive, organizations are at increased risk of being exploited by vulnerabilities in their systems. The need for a systematic and effective approach to protecting information assets has never been greater. This article examines the application of the matrix methodology to assess the importance of the organization's assets in accordance with the internationally recognized principles of ISO 15408 for the assessment of security characteristics. The study aims to use this matrix to assess the initial level of security of information assets in the organization. By ranking assets according to their criticality in terms of confidentiality, integrity, and availability, this approach provides a systematic and quantitative means of prioritizing the protection of various information assets. The matrix helps organizations identify which assets require enhanced security measures and enables them to allocate security resources more effectively.

Перевод пока недоступен