Державні інформаційні ресурси: особливості оцінювання стану кіберзахисту

Abstract

У доповіді розглянуто підходи оцінювання стану кіберзахисту державних інформаційних ресурсів.

The report considers approaches to assessing the state of cyber protection of state information resources. The regulatory, risk-oriented, practical and monitoring approaches are analyzed. It is established that no method separately provides reliable cyber protection. The regulatory approach creates a legal foundation, the risk-oriented optimizes resources, the practical one identifies vulnerabilities, and the monitoring one integrates all methods. The comprehensive application of approaches in a single cyber protection management system based on the SIEM system is recognized as optimal. An integrative model for protecting state information resources is proposed.