RISK ASSESSMENT OF OCCURRENCE COMPUTER INCIDENTS

 

Vladislav G. Yarikov

Candidate of Sciences (Pedagogy), Associate Professor,

Department of Teaching Methods of Mathematics and Physics, ICT,

Volgograd State Socio-Pedagogical University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Vitaly A. Revunov

Student, Department of Information Security,

Volgograd State University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Abstract. This article explores contemporary methodologies for risk assessment associated with computer incidents in the field of cybersecurity. The study highlights the growing importance of effective risk management due to the rapid advancement of technology and the increasing frequency of cyber threats. The authors analyze prominent frameworks, emphasizing their unique approaches to identifying, evaluating, and mitigating risks. The article underscores the adaptability of NIST, the operational focus of OCTAVE, and the quantitative precision of FAIR, while also noting their respective limitations, such as resource intensity or data dependency. Practical implementation steps are outlined, including asset identification, vulnerability analysis, risk evaluation, and the development of mitigation strategies. The authors stress the need for continuous monitoring and adaptation to address evolving threats. Additionally, the article highlights the critical role of fostering a security culture within organizations through employee training, clear policies, and leadership involvement. Technological innovations like artificial intelligence and machine learning are presented as valuable tools for enhancing threat detection and response. The study concludes by addressing the human factor, advocating for increased awareness and competency development among staff to minimize risks. Targeted at cybersecurity professionals, managers, and researchers, the article provides actionable insights and methodologies to strengthen organizational cyber resilience in an increasingly complex threat landscape.

 

Key words: cybersecurity, risk management, risk assessment, NIST Cybersecurity Framework, cyber threats.

 

This work is licensed under a Creative Commons Attribution 4.0 International License.