Methods and Models for Assessing the Cybersecurity Level of State Infrastructure

2026

Full text Open access: Hybrid Metadata (CSL-JSON)
DOI 10.52821/2789-4401-2026-1-137-151
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

The article examines the challenges of ensuring the cybersecurity of state infrastructure amid increasing digital risks and the growing sophistication of cyber threats. Purpose: The study aims to develop an integrated cybersecurity architecture based on international standards — ISO/IEC 27001, NIST SP 800-53, FAIR, CMMI, and MITRE ATT&CK — adapted to the national context of Kazakhstan. Methodology: The research employs a systemic and comparative analysis of existing cybersecurity assessment models, threat modeling in ICS/SCADA environments, and an examination of relevant regulatory frameworks and guidelines. Originality/Value: The originality of the study lies in the development of a conceptual cybersecurity architecture that integrates technological, organizational, and analytical components. The proposed model facilitates a shift from fragmented protective measures to a holistic risk management system, thereby enhancing the cyber resilience of state infrastructure. Findings: The findings demonstrate that integrating international frameworks significantly improves the cybersecurity and resilience of governmental systems and contributes to establishing an effective model for incident monitoring and response.