The study examines the problem of assessing the correctness of data provided by endpoint devices in automated systems. It is noted that data can be falsified intentionally by attackers, and therefore the assessment of data correctness and decisions made on its basis should be the part of the enterprise information security system. The main tasks for the described problem are formulated, and an approach to solving them is presented by creating reference models of endpoint devices. A procedure for assessing the correctness of data is proposed, which is depicted as a business process in IDEF0 notation. The main processes of the proposed approach are described in detail. The input and output data necessary for the functioning of the approach are indicated.