Cybersecurity Risk Assessment of Information Systems of Critical Infrastructure Objects

The concept of complex cybersecurity risk of information systems of critical infrastructure objects is substantiated in the paper, the vector model of risk and model of complex risk is offered, the method of calculation of total risk, complex risk is offered, the structural decision of computer system for calculation of cybersecurity risk of information systems of critical infrastructure objects is developed. Using the proposed method, it is possible to solve the issue related to the possibility of calculating the amount of risks, which allows to assess the risk as a whole, taking into account the human factor in risk assessment, which is extremely important for critical infrastructure, especially in the energy sector. The proposed computing system can be used as part of a decision support system for assessing cybersecurity risks of information systems of critical infrastructure facilities. The results obtained can be used to assess the cybersecurity risk of information systems of critical infrastructure objects in the construction and implementation of information security management systems, integrated information protection systems in automated systems in the development of a threat model, security policy, and protection plan. Despite a significant number of approaches to solving this problem, it remains relevant for the entire world community.