Key aspects of automated management of protection of sustainable functioning of critical infrastructure facilities
DOI:
https://doi.org/10.34121/1028-9763-2025-2-3-14Keywords:
protection of critical infrastructure recilience functioning, threats to critical infrastructure, modeling of critical infrastructureAbstract
The article is devoted to solving the problem of building automated management protection of critical infrastructure (CI) resilience functioning, which can be carried out in crisis (situation) centers (CSC). The article conducted a study, built a scheme, and defined and considered the main directions of such protection. The types of threats to CI objects (CIO) were determined. CIO were determined as complex interdependent structures, and the main types of interdependencies between them have been analyzed and identified.The Leontiev model for economic interdependence between CIs was presented. The main phases of the risk management process were analyzed. It was proposed to use a three-level situational awareness (SA) model in the CSC together with the use of innovative technologies. Current SA and risk assessment make it possible to create various scenarios of emergency deployment, on the basis of which modeling of protection by resilience functioning of CI is built. Two approaches to creating scenarios were considered — a retrospective approach and an approach based on a chain of likelihood. A step-by-step approach to building a chain of proto-similarity was depicted. Based on the analysis of approaches to modeling, it was determined that each of the approaches is intended for individual types or conditions of CI functioning. Therefore, it is expedient to use a combination of approaches, bottom-up and top-down modeling approaches, as well as a systemic approach. The task was considered and the British concept and general model of crisis management of CI resilience were presented. The role and methodology of four points of view of organizational resilience of CIOs were determined and analyzed. Based on the research results, the main requirements for automated management of the protection of the resilience functioning of the CIO, which can be applied in the CSC, were determined.
References
1. Про критичну інфраструктуру: Закон України від 16.11.2021 р. № 1882-IX. Дата оновлення: 15.06.2022. URL: https://zakon.rada.gov.ua/laws/show/1882-20#Text.
2. Питання мережі ситуаційних центрів: Постанова Кабінету Міністрів України від 11 липня 2023 р. № 705. URL: https://zakon.rada.gov.ua/laws/show/705-2023-%D0%BF#Text.
3. Деякі питання об’єктів критичної інфраструктури: Постанова Кабінету Міністрів України від 9 жовтня 2020 р. № 1109. URL: https://zakon.rada.gov.ua/laws/show/1109-2020-%D0%BF#Text.
4. North Atlantic Treaty. Article. URL: https://en.wikipedia.org/wiki/North_Atlantic_Treaty#Article_3.
5. White House, Presidential Policy Directive (PPD)-21—Critical Infrastructure Security and Resilience (Washington, DC: Office of the Press Secretary, February 12, 2013). URL: https://obamawhitehouse.archives.gov/the-press-office/2013/02/12/presidential-policy-directive-criticalinfrastructure-security-and-resil/.
6. DHS, NIPP 2013: Partnering for Critical Infrastructure Security and Resilience. Washington, DC: DHS, 2013. URL: https://www.cisa.gov/sites/default/files/publications/national-infrastructure-protection-plan2013-508.pdf.
7. Brussels Summit Declaration. Issued by the Heads of State and Government participating in the meeting of the North Atlantic Council in Brussels. 2018. 11–12 July. URL: https://www.nato.int/cps/en/natohq/official_texts_156624.htm?selectedLocale=en.
8. Bearse R. Conversation of Strategy. Podcast. «Understanding Critical Infrastructure» from Enabling NATO’s Collective Defense CISR (NATO COE-DAT Handbook 1). URL: https://ssi.armywarcollege.edu/SSI-Media/Recent-Publications/Article/3946047/understanding-criticalinfrastructure-from-enabling-natos-collective-defense-ci/.
9. Гречанінов В.Ф., Оксанич І.М., Лопушанський А.В. Використання хмарних технологій для вирішення питань інтеграції інформації у багаторівневих системах управліня. Системи керування та комп’ютери. 2022. № 4. С. 24–34.
10. НД ТЗІ 2.5-004-99. Критерії оцінки захищеності інформації в комп’ютерних системах від несанкціонованого доступу: Наказ Департаменту спеціальних телекомунікаційних систем та захисту інформації Служби безпеки України від 28 квітня 1999 р. № 22 зі змінами згідно з наказом Адміністрації Держспецзв’язку від 28.12.2012 р. № 806.
11. Клепко В.Ю., Голець В.Л. Вища математика в прикладах і задачах: навч. посібн. 2-ге вид. К.: Центр учбової літератури, 2009. 594 с.
12. Endsley M.R. Toward a Theory of Situation Awareness in Dynamic Systems. Human Factors Journal. 1995. Vol. 37 (1). P. 32–64. URL: https://www.researchgate.net/publication/210198492.
13. ДСТУ ISO 31000:2018 (ISO 31000:2018, IDT). Менеджмент ризиків. Принципи та настанови: наказ від 29.11.2018 р. № 446.
14. North Atlantic Treaty Organization (NATO) Science and Technology Organization, Mission Assurance for Autonomous Unmanned Systems. Brussels: NATO, 2018. Р. 7–5.
15. SCENARIO-BUILDING METHODOLOGY. Acaps. Technical brief. February, 2022. URL: https://www.acaps.org/fileadmin/Technical_notes/202202_acaps_technical_brief_scenario_building_methodology.pdf.
16. Petit F., Bergerson J.D., Berry M., Lewis L.P., Verner D. Critical Infrastructure Interdependency Modeling and Analysis: Enhancing Resilience Management Strategies. UChicago Argonne, LLC, Operator of Argonne National Laboratory («Argonne»).
17. British Standards Institution (BSI), Crisis Management — Guidance and Good Practice: BS 11200, 2014. London: BSI Standards Limited, 2014. N 2.
18. Denyer D. Organizational Resilience: A summary of academic evidence, business insights and new thinking. BSI and Cranfield School of Management. 2017. URL: https://www.bsigroup.com/Documents/our-services/Organizational-resilience/Documents/OrganizationalResilience-Cranfield-research-Executive-summary.pdf.
102
22
