ECONOMIC EFFICIENCY OF INFORMATION SYSTEM PROTECTION IN SERVICE COMPANIES
The article features the procedure for management of information security incidents at the enterprises. Depending on what parameters are used in the organization for the events assessment methodology, the relevant methods of assessment and analysis are applied. Regardless of the assessment parameters, general scheme and the approach to the events assessment are being used. Generally the events assessment process includes two phases: the first phase contains standards for event analysis, which define the company's core assets, probability of threats occurrence and the size of financial loss; the second phase includes standards for events evaluation, where the most important is the assessment of the level of risk, acceptable to the organization.