2.3. Methodological approach for analyzing the impact of staff qualifications and psychological conditions on the level of systems information security

Employees' qualifications, mental state, and psychophysical properties can act as their characteristics.

### 2.3.1. Staff qualification assessment

This is a proposed estimate of staff's qualification in an expert way:


The limiting minimum value for the staff's qualification k is 0, because staff does not create vulnerabilities and technical malfunctions in the technical and software components of the information system. The maximum value for the staff's qualification k is 3; in this case the security service includes a large number of highly skilled employees who can increase labor productivity working together.

The estimation should be carried out separately for each component because maintenance of various components of the information system is implemented in different ways. This is proposed to define the malfunction as various malfunctions in the operation of the information system components that require staff intervention to eliminate them. This is proposed to understand vulnerability as a defect of information system that can violate its integrity, availability, and confidentiality and cause a malfunction.
