APPLICATION OF ARTIFICIAL INTELLIGENCE TECHNOLOGIES FOR THE AUTOMATION AND INTELLIGENT ANALYSIS OF INFORMATION SECURITY MANAGEMENT SYSTEM AUDITS

2026

Closed access Metadata (CSL-JSON)
DOI 10.51775/2790-0886_2026_74_3_196
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

The continuous growth of data volumes and the increasing complexity of modern IT infrastructures have significantly reduced the effectiveness of conventional approaches to auditing Information Security Management Systems. In such conditions, ensuring scalability and rapid analysis of large datasets becomes a critical challenge for security auditing processes. The purpose of this study is to examine the potential of applying machine learning (ML), deep learning (DL), and natural language processing (NLP) techniques to enhance and automate information security audit procedures. The study reviews contemporary algorithms used for security log analysis, anomaly detection, event correlation, and evaluation of organizational compliance with the requirements of the international standard ISO/IEC 27001. Based on the research, this study proposes an original conceptual model of intelligent auditing, built on a multi-layered architecture that integrates ML and Large Language Model (LLM) methods. The obtained results indicate that the integration of intelligent analytical techniques improves the accuracy of data analysis, supports automated identification of compliance gaps, and enables the transition from periodic assessments to continuous information security auditing.