Design methodology of cyber security operational center
Ihor Subach, Dmytro Mogylevych, Artem Mykytiuk, Volodymyr Kubrak, Stanislav Korotayev · Zenodo (CERN European Organization for Nuclear Research) · 2021
The process of designing a cybersecurity situational center as a complex organizational and technical system is considered. It is proposed to consider the problem of designing the cybersecurity situational center from a formal point of view, as a problem of a class of multi-criteria multi-parameter problems, and as an approach to solving it we chose the decomposition of the design process into separate stages using the methods of successive approximations. The main stages are highlighted and described, the principles of implementing a systematic approach to the design of cybersecurity situational center are formulated and disclosed. The formal statement of the problem of task distribution between the operational personnel of situation center is presented. Criteria for choosing the type of organizational structure of the cybersecurity situational center are formulated and described, and on their basis the choice of the matrix hierarchical structure for its implementation is substantiated. The performance indicators for assessing the functioning of the cybersecurity situational center and its organizational and technical structure are considered.