Determination of the required degree of data protection in automated control systems

Abstract

Abstract The article considers the specifics of automated control systems for technological production and processes as objects of information security, proposed the approach to the decomposition of their components for further evaluation of the necessary degree of protection of the data they process. The method for obtaining the quantitative assessment of the grade of information resources security is presented. The proposed method allows taking into account the data value and the degree of criticality of violations of its integrity, accessibility and confidentiality for the functioning of the system. It can be used in practice at enterprises of various kinds of activity as an independent procedure, or as part of measures at the stages of preliminary analysis of automation systems before design or improving their data protection subsystems.