The evaluation method of the design department’s information assets

Abstract

The activity of the design department (DD) is currently one of the most significant areas in the field of nuclear energy, the defense and rocket, and space industries. This area characterized by large volumes of used economic, technological, industrial and other resources. One of the tasks of the DD is to evaluate information assets (IA) and protect them from threats. The objectives of this article are to develop a method for assessing DD’s IA, as well as discussing the possibility of using this method in practice and the risks to which the DD is exposed unless special measures are taken to evaluate IA and threat analysis. Studies related to the assessment of the importance of information IA, the development of a threat model, and damage prediction investigated. The specificity of DD and processing of IA has been determined. In this paper, it is proposed to use the set-theoretic model for evaluating the IA of the DD that takes into account their structure, attributes, and life cycle. To assess the damage caused by the threat, it proposed to use the method of ALE. For the first time, a method for evaluating the IA of DD proposed. This method implemented in software. The software implementation successfully tested in an enterprise that includes the DD. The investigated problem studied quite recently. Therefore, there are open questions such as the classification of information assets of the DD and their categorization (confidentiality stamping), analysis of the life cycle of IA and threats, determination of the criticality level of the DD’s IA, assessment of damage from the realization of the threat. The prospect for the development of the research is the development of a threat model for information systems of the DD.