Abstract
The Industrial Internet of Things (IIoT) is a key component of Industry 4.0, enabling intelligent automation, real-time data exchange, and integration of cyber-physical systems in industrial environments. However, the increasing complexity and interconnectivity of IIoT infrastructures introduce significant cybersecurity challenges. This paper provides a comprehensive overview of the current state of information security in IIoT systems. It begins with a conceptual analysis of IIoT and its distinctions from general IoT applications. The study reviews recent scientific research from 2018 to 2023, focusing on threat models, asset classification, and risk assessment frameworks. A detailed taxonomy of threats and vulnerabilities specific to IIoT environments is presented, emphasizing the insufficiency of traditional IT security strategies in industrial settings. Furthermore, the article analyzes protected asset categories and their corresponding attack vectors. Drawing on literature analysis and empirical observations from Kazakhstan’s industrial digitalization initiatives, this work identifies pressing security gaps and proposes practical recommendations for enhancing cybersecurity at various stages - from system design and data protection to incident response and personnel training. The findings aim to contribute to the development of robust and adaptive security strategies tailored to the unique needs of IIoT systems