Development of a fuzzy risk assessment model for information security management (Technology audit and production reserves, 2025)