Comparative analysis of the us ISO and NIST standards on assessing the risk of information leakage in communication systems

Abstract

The reliability of any system was always defined by its level of stability and by availability to have in responsible security persons or specialists’ disposal necessary preventive measures, which are adequate to the threats risks and which are not yielded to easy elimination or demolishing. There was always in the world competition for the information ownership and according to it there was always the rivalry for ability to preserve effectively this ownership from the “outsiders” and much more from competitors. The protective systems are as effective as they include completely all the possible and theoretically probable processes, which are going on within the information system (IS) or can be caused by outside influence, or when they appeared accidentally. Therefore, risk controlling management model for the IS must reflects all the variety of events and also the processes of resources distribution and using. Making the analyses of available for today published works on this occasion it’s possible to come to a conclusion that all of them (standards) contain in themselves a great deal of engaging of methods and tools, which are sufficient for to discharge the setting tasks. But in the information field the life is also going on and appearing of the new risks is inevitable as the necessity to search for the new standard means of counteraction to them. The theme of this article is the comparing analyses of two main standards, which are appealed to create secure conditions in information space for the owners of information and for their working without hindrances within their network, and for their outside partners and consumers.