Information and Analytical Support for the Protection of Important Critical Information Infrastructure Objects

Abstract

This article considers issues related to information and analytics support of organization and management activities for the protection of critical information infrastructure (CII). The covered problem is of interest for large industrial enterprises (subjects of CII), therefore, there is a need to accumulate and process large data arrays that are of primary importance for ensuring information security. To meet the information needs arising while protecting CII, it is proposed to use the information-analytical system (IAS), created on the basis of the integrated database management system (IDMS) “CronosPro”. The scientific novelty of the work is that the newly created IAS allows to formalize and ensure the information needs of the security administrator at all stages of the protection of CII objects. An example of information and analytical support for activities related to the formation and operation of databases is given to illustrate the full range capabilities of IAS: the categorization of CII object, confidential information storage devices, and persons allowed to the confidential data. These databases greatly facilitate the definition of the actual awareness of employees of CII subject in the confidential information, as well as conducting checks of confidential paperwork. Since all the listed databases consist of similar and interrelated information objects (“Organization”, “CII object”, “Person”, “Action”, “Data Storage”, “Document”), IAS allows you to decide not only knowledge management but also information and logical tasks as well as to identify non-obvious connections (second-level connections) between information objects, which is especially important in the process of investigating computer incidents.