fuzzy; fuzzy tool; expert system; uncertainty; risk analysis; information security

This article describes implemented fuzzy tool and extended application for conducting information security risk analysis. The paper describes the fuzzy tool and linked application and shows the advantages of this approach in the contradiction of tools and methodologies used today. This paper covers the fuzzy tool itself and shows its implementation in the process of risk management. The tool is connected to the expert system and methodology which is the part of the complex approach to decision making process that will be demonstrated in this paper. The knowledge base of expert system is created based on user input values and the knowledge of the problem domain. The implemented application is demonstrated on examples and problems from the area of information security.