Assessment of Cyber Risks of a Critical Information Infrastructure Facility Based on the Topology of Its External Connections

The concept of cyberspace as a critical information infrastructure object using mathematical topology is described. A method for categorizing the risk of an external connection based on the impact on the integrity, confidentiality, and availability of information exchanged over this connection is proposed. The method considers communication as an element of the cyberspace topology of a critical information infrastructure object, a "supply chain" from the cyber securi-ty risk management perspective. That makes it possible to fill the corresponding gap in the na-tional regulatory documents on categorizing critical infrastructure objects and their cyber pro-tection.