Assessing and Improving the Cybersecurity of the Topology of Critical Information Infrastructure Objects in Global Cyberspace

Risk-informed approaches to the organization of the topology of critical information infrastruc-ture during its design and modernization are proposed. Recommendations are provided to in-crease the protection of critical information assets from such attacks, the vector of which is ex-ternal connections (connections in cyberspace) of the critical information infrastructure object (CII), and references are also provided to good practices for assessing information security risks. The presented recommendations describe additional measures that detail or complement more general procedures performed in the information security cycle.