Honchar S. Methodology for assessment cybersecurity risk of information systems of critical infrastructure objects

The dissertation is devoted to solving an important scientific and practical problem related to increasing the level of protection of critical infrastructure information systems by developing a methodology to ensure the cybersecurity of critical infrastructure information systems, focused on creating appropriate methods and means of calculating total risks. The paper analyzes current methods, methodologies, methodologies for assessing the cybersecurity risks of information systems, including critical infrastructure facilities, as well as software for managing such risks. The concept of complex risk of cybersecurity of information systems of critical infrastructure objects is substantiated, its meaningful interpretation has been carried out and the basic properties have been considered. Methods have been developed for calculating the total cybersecurity risk of information systems of critical infrastructure objects using the maximum effect value. A method has been developed for calculating the total cybersecurity risk of information systems of critical infrastructure facilities using vector algebra theory and complex numbers. A methodology has been developed for assessing the cybersecurity risk of information systems of critical infrastructure facilities using the developed methods. Structural solutions for computing systems were developed to calculate the total cybersecurity risk of information systems of critical infrastructure objects using the developed methods. Developed algorithmic and software computing systems to calculate the total cybersecurity risk of information systems of critical infrastructure objects using the developed methods. Experimental studies were carried out to confirm the theoretical positions and practical developments of the dissertation research.