Abstract:
The article presents an advanced technique for categorizing objects of critical information infrastructure (CII), taking into account industry criticality. The aim of the study is to improve the objectivity and accuracy of the categorization process, minimize subjective distortions, and optimize the allocation of resources for ensuring information security. The authors propose a methodology based on calculating an industry criticality coefficient, which integrates expert assessments across five key criteria: national security, economic significance, social importance, industry interdependence, and potential damage. The methodology was tested on 14 industries, enabling their classification into three criticality categories. The results demonstrated high consistency among expert evaluations and confirmed the effectiveness of the proposed approach. Implementing this technique facilitates differentiated planning of CII protection measures and optimizes regulatory requirements.
Keywords:critical information infrastructure, object categorization, industry criticality, information security, expert evaluations.
