1. A computer-implemented method for determining an information security level for an enterprise, the method comprising: collecting data relating to a structure of the enterprise including a plurality of elements, the plurality of elements including equipment and control systems for the equipment of the enterprise; creating, by a hardware processor, a model of an operation of the plurality of elements of the enterprise based on at least one function of each element that is determined from the collected data; identifying, by the hardware processor, criteria to evaluate the operation of the plurality of elements based the at least one function of each element; determining, by the hardware processor, a coefficient indicating a functional effectiveness of the plurality of elements of the enterprise based on the identified criteria; simulating, by the hardware processor, control of the enterprise by applying different sequences of events and actions to increase or decrease the coefficient, where the different sequences of events and actions are based on previous events for one or more simulation iterations using the at least one function of each element; and determining, the hardware processor, an information security level for the enterprise based on a value of the coefficient in response to the simulated control of the enterprise by applying the different sequences of events and actions.