Questions of trust assessment in information systems of personal data

The aim of the study is to apply a formalized approach to assessing the level of trust in a personal data information system (PDIS) using existing models and regulatory requirements. The paper analyzes the current legal and regulatory framework, including the requirements of FSTEC and the FSB of Russia, as well as Federal Law No. 152-FZ. The methodological basis is the linear “factor – criterion – metric” model, which enables a comprehensive quantitative and qualitative evaluation of the security of PDIS. The study examines key metrics reflecting the degree of compliance with security requirements, audit effectiveness, incident response time, and the completeness of vulnerability remediation. The Harrington desirability function is applied to calculate the generalized trust level. Special attention is given to the influence of the system's operational environment (trusted or untrusted) on the interpretation of the results. The scientific novelty lies in the practical application of a multi-level trust assessment model under real-world operating conditions of PDIS. The practical significance of the research is in the potential use of the results for auditing and modernizing personal data information systems, improving transparency in security assurance processes, and preparing for system certification and regulatory inspections.