The method of evaluating the security of the information systems

摘要

The author undertakes a research over the concept of information security, security which could determine risks. Starting from the risks and the importance of the security of the information systems, this research identifies and presents ways of controlling this characteristic, which is composed out of complex and concrete technical measures. It is interesting to notice that the author analyses, connects and presents these aspects from the perspective of the information audit function. Finally, the paper identifies a concrete way for the objective and unitary evaluation of the security characteristics of the information systems.