Impact Analysis for Risks in Informatics Systems

Abstract: In this paper are presented methods of impact analysis on informatics system security accidents, qualitative and quantitative methods, starting with risk and informational system security definitions. It is presented the relationship between the risks of exploiting vulnerabilities of security system, security level of these informatics systems, probability of exploiting the weak points subject to financial losses of a company, respectively impact of a security accident on the company. Herewith are presented some examples concerning losses caused by excesses within informational systems and depicted from the study carried out by CSI.