COMPUTER INFORMATION SECURITY SYSTEM SUFFICIENCY ASSESSMENT METHODOLOGY
The article presents a methodology for assessing the adequacy of the information protection system of a typical information system. The following methods were used: collection and analysis of information about a typical information system; assessment of the adequacy of the implementation of protective equipment using fuzzy inference operations. The procedure for evaluating information security systems has been determined. A model of the information protection process of a typical information system is built. Models of system resources and system threats are proposed, and matrices of the relationships between resources and threats to information security of the system are constructed. The stage of analysis of information security tools using expert assessment is described.