Methodology for the Synthesis of Acceptable Options for Organizational Functional Structure of the Security Management System of a Significant Object of Critical Information Infrastructure

Abstract

The technologies inevitably development gives rise to new threats, and requires an approaches revision for both the security systems themselves and their management. A special place in the fight against threats to information security is occupied by the cybersecurity of critical facilities for the country, called critical information infrastructure common objects. The security of critical information infrastructure facilities is provided by heterogeneous means of information protection. This, in turn, creates a paradox in which ensuring the country’s cybersecurity critical facilities is not possible with the information security management system introduction. Such a system should provide the ability to manage heterogeneous information security tools. Any information security management system has a number of limitations. The main limitation in this case is the need to build an automated information security management system that manages a variety of heterogeneous information security tools, possibly incompatible with each other. In this paper, the authors solve the problem of synthesizing acceptable options for the organizational and functional structure of the critical facility security management system, which can ultimately ensure the information security.