APPLICATION OF THE RUSSIAN FEDERATION'S FSTEC VULNERABILITY CRITICALITY ASSESSMENT METHOD TO ANALYZE THE EFFECTIVENESS OF INFORMATION SECURITY SYSTEMS IN GOVERNMENT INFORMATION SYSTEMS SYSTEMS

Novikov Evgeny Ivanovich, Afanasyev Vadim Vladimirovich, Kunin Nikita Timofeevich

This article examines approaches to applying the new methodology of the Federal Service for Technical and Export Control of Russia (FSTEC) dated June 30, 2025 [1]. An analysis of the transition from a formal vulnerability assessment to a context-sensitive model is provided. An algorithm for using this methodology to quantitatively evaluate the effectiveness of implemented information security tools (ISS) is proposed, using government information systems (GIS) as an example, where information availability is a key parameter [10].

Keywords:analysis, evaluation methodology, effectiveness, information security systems, government information systems