О применении риск-ориентированных подходов при решении задач обеспечения информационной безопасности в организации

Проблемы информационной безопасности. Компьютерные системы. 2014. № 4. С. 152–159.

Baranov P.

The article's task is to analyze risk management methods both presented in written sources such as technical literature, standards, recommendations and experienced on practice. The analysis' goal is to propose a classification, highlight strong and weak 2 spots concerning practical appliance for information security (IS) purposes. The second goal is to propose ways of implementation for each group of methods to reach common objectives of IS. The area of IS tasks possible to be solved with appliance of a group of methods are also indicated.

Keywords: информационная безопасность, risk management, project management, риск-менеджмент, управление IT-проектами, планирование бюджета, budget planning, information security