Information Security Audit Using Open Source Intelligence Methods

The article shows the possibility of detecting vulnerabilities in the information and telecommunication networks of organizations when conducting an information security audit using methods of searching for information from open sources (Open source intelligence). These methods extend the capabilities of conventional auditing. They allow to detect in the information resources of the organization the presence of hidden information of limited access, which is not available when using conventional search methods. For example, when using Open source intelligence, you can identify non-indexed files with personal data or know-how technology that are not intended for open acquaintance with them by unauthorized persons. The techniques described in this article can supplement the standard audit techniques and provide information on those channels of confidential information leakage that cannot be detected during the standard audit procedure of an organization for information security requirements. On the basis of the results obtained, recommendations were developed to supplement the methods of conducting an audit of information security of organizations by applying methods of searching for information of limited access using Open source intelligence.