Decision Support System for Identification and Security Management of Essential and Digital Services

摘要

The paper presents a software system that provides the workflow of security-related information concerning digital and essential services, at national level. Services graph is reconstructed from questionnaires filed by service operators. Importance of each service can be estimated in many ways, but it always represents aggregate impact of a service on dependent services. The system distributes security recommendations among service providers. Recommendations contain suggested security actions, chosen from a repository and adequate to calculated service importances. A real service structure is studied. The software system can be considered a prototype that addresses directly the Directive on Security of Network and Information Systems (NIS, 2016, by European Commission).