DEVELOPMENT OF A METHODOLOGY FOR MONITORING THE LEVEL OF INFORMATION SECURITY OF CRITICAL INFORMATION INFRASTRUCTURE OBJECTS
Andrew Baksheev, Ilya I. Livshitz · Voprosy kiberbezopasnosti · 2023
Abstract Purpose of work is to increase the level of security of subjects of critical information infrastructure through the use of a “dual” regime to implement a full cycle of ensuring the security of critical information infrastructure facilities - a full national regime and a combined regime. Research method: to achieve the purpose of the work, methods of analysis, comparison, generalization, structural decomposition from the theory of system analysis, determination of criteria for monitoring the level of information security of CII objects were used. Research result: the paper presents a detailed analysis and comparison of existing concepts for controlling the level of information security used to obtain a certain level of security. A method for monitoring the level of information security of CII objects is proposed. The scientific novelty lies in the development of a methodology for monitoring the level of information security of CII objects, using an information security audit model for CII objects, which in turn uses the possibility of a “dual mode” for a full cycle of ensuring the security of CII objects – full national and combined modes, allowing, if necessary, to include additional functional blocks