ECONOMIC LOSS FROM UNAUTHORIZED ACCESS TO INFORMATION SYSTEM OF SERVICE COMPANIES
The article features the study of information security system for data center and local network of LLC «Optima-Service». Depending on the parameters used by the company for evaluation methodology, the appropriate methods of assessment and analysis are applied. Regardless of the evaluation parameters, general scheme and approach to the assessment of events are used. Generally the evaluation process of events includes two phases: the first phase includes standards for event analysis, which define the company's core assets, probability of threats and possible size of financial loss; the second phase includes standards for evaluation of events, focused on the assessment of the level of risk, which is acceptable for the organization.