IT security evaluation - “hybrid” approach and risk of its implementation

摘要

It is relevant to evolve processes of evaluation of the IT security nowadays. Creating and application of the common evaluation approaches for an IT component, which are processed by the governmental and civil organizations, are still not solving problem. It is suggested to create a more precise and complex assessment tool for an IT security – the "hybrid" method of the IT security evaluation for a particular object, which is based on a range of adequate assessment tools.