No abstract

Protecting information that is potentially accessible through external communication channels from external threats is one of the primary objectives of information security. Creating an information security system requires material investments, the cost of which increases along with the increasing degree of information protection. Therefore, the task of determining the level of investment in information security that provides the minimum total cost of the information protection system and losses from realized threats that remain after the implementation of the information protection system arises. In this paper, we present a scheme that allows us to solve the problem of optimizing the costs of an information security system, the implementation of which ensures a minimum of average total costs for the implementation of the information security system and losses due to the remaining threats realized after the establishment of information security system.