Justification of information support for specialists responding to cybersecurity incidents at critical infrastructure facilities

nts at critical infrastructure facilities The following is proposed for consideration: highlighting the main provisions of the scientific and methodological apparatus for information support of cybersecurity incident response specialists who perform their duties as part of a computer emergency response team for critical infrastructure facilities. The first substantive part of the article reveals: the principles of critical infrastructure facility design from the perspective of system analysis; the systemic features of the main components of critical information infrastructure facilities in the context of management implementation; the implementation of critical infrastructure facility operation as a management process; the statement of the necessity to take into account the connection of the internal communication system to the Internet (public cyberspace) to ensure the formation of direct (reverse) communication channels; features of the development of control influences based on programmatic, optimal, and adaptive management; features of the implementation of automatic and automated management of the technological process; conditions for the timely development of correct control influences by the management body of the critical infrastructure object; the cycle of technological process management, the roles and functions of its support components; description of the management process efficiency indicator. The second part highlights the following aspects of the study: the feasibility of considering the components of the technological process management cycle as a mass service network; the relationship between the failure of key components of critical information infrastructure and the deterioration of technological process management efficiency; the characteristics of failures with an indication of the possibility of compensating for them through a priori reliability analysis; it is stated that reducing a priori uncertainty at the design stage is not suitable for compensating for failures due to unauthorized interference in the form of cyberattacks through public cyberspace; the need to implement information support for decisions made by specialists responding to cybersecurity incidents at the stage of critical infrastructure facility operation.