Analysis of Security Threats to the Information System of Personal Data Processing and Risk Assessment

Student: Iosifova Viktoriia

Supervisor: Elena Baranova

Educational Programme: Information Security Management (Master)

Year of Graduation: 2021

The paper provides a review of regulatory legal acts in the field of processing and protecting personal data, a comparative analysis of the current and obsolete methodologies is performed, a description of the protected object was developed, threats were modeled and the risks of implementing current threats were assessed. Threat modeling was carried out for information system of personal data "1C", the analysis of the risks of the implementation of actual threats was carried out using the COBIT methodology and software «Coras»

Student Theses at HSE must be completed in accordance with the University Rules and regulations specified by each educational programme.

Summaries of all theses must be published and made freely available on the HSE website.

The full text of a thesis can be published in open access on the HSE website only if the authoring student (copyright holder) agrees, or, if the thesis was written by a team of students, if all the co-authors (copyright holders) agree. After a thesis is published on the HSE website, it obtains the status of an online publication.

Student theses are objects of copyright and their use is subject to limitations in accordance with the Russian Federation’s law on intellectual property.

In the event that a thesis is quoted or otherwise used, reference to the author’s name and the source of quotation is required.

Search all student theses