PROPOSAL OF THE EXPERT SYSTEM FOR CONDUCTING INFORMATION SECURITY RISK ANALYSIS

The following article focuses on risk anal ysis in the area of information security. The paper focuses on problems in today's approaches (mainly qualitative and quantitative methodologies) and proposes an expert system and underlying methodology to mitigate them. After we formulate the problem we show model of approach and show its application. The proposed expert system and the whole process of its application will be demonstrated on examples and illustrations from the problem domain.