The evaluation of the electronic services with accordance to IT-security requirements based on ISO/IEC 27001

摘要

This publication discusses the problem of compliance evaluation for electronic services (ES). The relevance of this publication caused certain problems in the ES organization, formation of international confidence in the ES provided, as well as a wide range of approaches to ensure IT-security. It is noted that along with well-known standards set by the various national regulators, well-known term for the purpose of forming an objective and independent evidence of the ES credibility can provide international standards ISO 27001 series. Methodical basis of the ISO 27001 series operates with an objective and independent assessment of the many IT-security metrics for the quantitative estimation of the IT-security level for ES. The obtained results can find application in the provision of international confidence for ES services through objective and independent IT-security evaluation.