Assessment of cybersecurity of the defense department taking into account best international practices

Introduction. In the context of rapid development of information technologies and the increasing complexity of cyber threats, ensuring an adequate level of cybersecurity for departmental information and communication systems (ICS), especially in the defense sector, becomes critically important. The growing dependence on ICS necessitates systematic approaches to assessing their security level. Problem statement. Existing state and international standards such as ISO/IEC 27001 (DSTU), as well as NIST methodologies and maturity models like CMMC, define cybersecurity requirements but do not provide a sufficiently formalized, compact, and adaptable assessment framework for departmental structures. The absence of a unified approach complicates comparative analysis between organizational units and the formation of an aggregated departmental-level assessment. Purpose. The purpose of this study is to develop a method for assessing cybersecurity provision in departmental ICS, enabling quantitative evaluation of implemented security measures based on the Information Security Management System (ISMS) requirements of ISO/IEC 27001. Materials and methods. The study applies system analysis, exper