The concept of assessing the IT service providers information security level for industrial facilities
The information systems (IS) observed a significant amount of critical threats that caused the emergence of new attack vectors, as well as deficiencies in risk management. Respectively, is of particular interest to study the problem of information security competence assessment accompanying the IP level service providers. In this issue proposes the "IT-Security Paradox" wording, which allows to consider the most important (critical) IT-Security threats and propose an approach based on the modern risk- based standards implementation, especially international standards ISO. The proposed concept of assessing the level of IT service providers information security for industrial facilities consists of 2 basic principles and a few extensions that allow to take into account the specific requirements for the IT-security specific functioning of IS and provide an opportunity to assess (qualitatively or quantitatively) as part of routine inspections (audits).