Quantitative assessment and determination of the level of cyber security of state information systems

Abstract

The article develops a method of quantitative and qualitative analysis and determination of the level of cybersecurity of information systems of the state. Ensuring cyber security is a continuous, extremely complex and multifaceted process, and the success of its implementation is determined by the state of relations in society and depends on each of its representatives, but above all on the implementation of public policy in this area. The obtained results clearly define the criterion of cybersecurity, which is based on the numerical values of the index of cybersecurity or cyberthreat. The criterion for assessing the level of cyber threat should be based on the nature of the cyber threat, taking into account its scale. Both indicators have a quantitative dimension, but their direct reduction to one generalized indicator has no basis because of the fundamental difference between the phenomena characterized by them. Therefore, the most rational way is logical analysis. Thus, the article shows that each level of cyber threat corresponds to its own
level of cybersecurity. Thus, the criterion for assessing the level of cybersecurity is the level of cyber threat.