Concepts for ensuring comprehensive security of upper-level ACSs of railway CII facilities
https://doi.org/10.21683/1729-2646-2025-25-3-42-49
Abstract
The paper examines concepts associated with ensuring comprehensive security of the control area of upper-level automated railway control and management systems and the primary regulatory requirements for information protection. It is shown that the presented concepts do not contradict the requirements of the FSTEC of Russia.
About the Authors
P. A. PopovRussian Federation
Pavel A. Popov, Candidate of Engineering, Deputy Director General, Director, Saint Petersburg Branch,
Moscow.
E. N. Rozenberg
Russian Federation
Efim N. Rozenberg, Professor, Doctor of Engineering, First Deputy Director General,
Moscow.
A. G. Sabanov
Russian Federation
Alexey G. Sabanov, Associate Professor, Doctor of Engineering, Chief Expert, Information Society Technologies Integrated Research and Development Unit,
Moscow.
I. B. Shubinsky
Russian Federation
Igor B. Shubinsky, Professor, Doctor of Engineering, Expert, Scientific Council under the Security Council of the Russian Federation, Chief Expert,
Moscow.
References
1. Popov P.A., Rozenberg E.N., Sabanov A.G., Shubinsky I.B. Integrated Safety of ACS of Railway CII Facilities. Dependability 2024;24(4):48-57. (in Russ.) https://doi. org/10.21683/1729-2646-2024-24-4-48-57.
2. GOST R 71454-2024/IEC TR 63161:2022. Assignment of a safety integrity requirements. Basic rationale. Moscow: Russian Standardization Institute; 2024. (in Russ.)
3. GOST R 71452-2024/IEC/PAS 63325:2020. Lifecycle requirements for functional safety and security for IACS. Moscow: Russian Standardization Institute; 2024. (in Russ.)
4. [Information security requirements for automated process management systems at critical facilities, potentially hazardous facilities, as well as facilities that pose an increased danger to human life and health and the environment approved by order of the FSTEC of Russia dated 14.03.2014 No. 31.] (in Russ.)
5. GOST R 59505-2019. Industrial-process measurement, control and automation. Framework for functional safety and security. Moscow: Standartinform; 2021. (in Russ.)
6. [Safety requirements for significant facilities of critical information infrastructure of the Russian Federation approved by the order of the FSTEC of Russia dated December 25.12.2017 No. 239]. (in Russ.)
7. [Information security requirements that define the levels of trust to the information security and information technology protection tools approved by order of the FSTEC of Russia dated 02.06.2020 No. 76]. (in Russ.)
8. Nadezhdin Yu.M. Security of critical facility PCS. Security and Safety 2014;2:34-39. (in Russ.)
9. GOST 33432-2015. Functional safety. Policy and programm of safety provision. Safety proof of the railway objects.
Review
For citations:
Popov P.A., Rozenberg E.N., Sabanov A.G., Shubinsky I.B. Concepts for ensuring comprehensive security of upper-level ACSs of railway CII facilities. Dependability. 2025;25(3):42-49. (In Russ.) https://doi.org/10.21683/1729-2646-2025-25-3-42-49