Information security, cybersecurity and privacy protection. Evaluation criteria for IT security. Methodology for IT security evaluation