The article considers the state of the security monitoring (SM) system, its problems, and differences of SM system in Ukraine from SM systems in developed countries. The functions of the SM system are analysed in dependence of the aims, while the monitoring process itself is considered as a part of information security technology. The creation of three-tier SM system is proposed. The structure of security criteria is considered basing on the principles of risk-oriented approach and on the analysis of algorithms. The concept of the new SM system is considered together with practical questions regarding the maintenance of database and knowledge base on the security issues.
security, monitoring, risk, model, interface, algorithm