Ranking of security measures of significant objects of critical information infrastructure

Abstract

One of the main tasks of the state is the proper functioning of internal systems that provide a decent standard of living for citizens. But what actually ensures the functioning of the activities of the state in various areas? Critical information infrastructures and their significant objects, as well as telecommunication networks used to organize the interaction of such objects, have become one of the main support systems. Order of the FSTEC of Russia No. 239 contains protection measures, but does not describe methods for assessing the effectiveness of protection of significant objects of critical information infrastructure, which in turn casts doubt on the quality of assessment of built protection systems. This article discusses the ranking of threats and the development of a method for evaluating the effectiveness of the built protection system based on weighting factors. The developed method is based on the methodology for assessing the level of security protection of the information system of the Central Bank of Russia