Industrial Automatic Control Systems and Controllers Annotation << Back Model Assessment of the Vulnerability Confi dential Information in the Automated Control System T.I. Kasatkina, E.V. Grechishnikov, A.S. Dubrovin, V.V. Lavlinsky, O.V. Lankin, O.G. Ivanova The work is devoted to solving the problem of assessing the degree of information security, as well as assessing the degree of effectiveness of protection of information assets in an automated management system. Its formulation is connected with the shortcomings of the existing methodical and mathematical apparatus for assessing the protection of information assets in accordance with modern criteria and norms. The analysis of existing methods and criteria carried out in this paper showed that it is inappropriate to use them to assess the degree of information security in an automated management system due to limitations and strict requirements imposed by the specifi cs of the organization’s activities. In addition, the analysis also showed that there is no correlation between the methods of assessing the degree of protection and the effectiveness of protection, as well as the criteria used to conduct an appropriate evaluation for the security system. To assess the degree of protection of confi dential information, a model for assessing the degree of information security in an automated management system is proposed, and an appropriate methodology for assessing the degree of security of an information resource is proposed, which offers four types of methods for different situations and proposed tasks. Keywords: automated control system; information; information security; threat; level of risk. Contacts: E-mail: kasatkinatatian@googlemail.com Pp. 38-51.