Skip to content
DSML.KZ
Publications

Talk · IEEE International Conference on Smart Information Systems and Technologies · April 28, 2022

Comparative Analysis of Risk Assessment During an Enterprise Information Security Audit

Zhanna Alimzhanova, Akzer Tleubergen, Salamat Zhunusbayeva, Dauren Nazarbayev

Zhanna Alimzhanova
Open via DOI

Abstract

This article discusses a threat and vulnerability analysis model that allows you to fully analyze the requirements related to information security in an organization and document the results of the analysis. The use of this method allows avoiding and preventing unnecessary costs for security measures arising from subjective risk assessment, planning and implementing protection at all stages of the information systems lifecycle, minimizing the time spent by an information security specialist during information system risk assessment procedures by automating this process and reducing the level of errors and professional skills of information security experts. In the initial sections, the common methods of risk analysis and risk assessment software are analyzed and conclusions are drawn based on the results of comparative analysis, calculations are carried out in accordance with the proposed model.

Information and Cyber SecurityCybersecurity and Information SystemsWeb Application Security Vulnerabilitiesinformation security risk assessmentinformation security auditenterprise information security

More by Zhanna Alimzhanova