fuzzy; expert system; methodology; uncertainty; risk analysis; information security

The following article focuses on risk analysis in the area of information security. The paper focuses on problems in today?s approaches (mainly qualitative and quantitative methodologies) and proposes an expert system and underlying methodology to mitigate them. After we formulate the problem we show model of approach and show its application. The proposed expert system and the whole process of its application will be demonstrated on examples and illustrations from the problem domain.