audit; expert system; fuzzy; operating system; security configuration

The paper deals with an audit of operating systems. It demonstrates usage of expert systems for determining security level for an operating system component against computer threats. The role of this hierarchical network of expert systems is to process vague input information, which is used by an auditor to enhance the audit process. Another role is assessment of configuration parameters and security settings of an operating system as well as interpretation of the current security level for the operating system component. For demonstration purposes was as the component selected, the user account. By using this form of input and output information is an auditor able to determine the current security level of an operating system using his own language no matter how big expert of this problem domain he is.