Protecția integrată a sistemelor informatice critice / Integrated protection of critical information systems

A critical information system is a service whose functionality is so vital that its inability or destruction would have a debilitating impact on the deterioration or security of any state: production and distribution of electricity, telecommunications, banking and financial services, gas and oil, water supply systems, transportation, health care, emergency and government services. Basically, the system is subsumed into the following four attributes: availability, integrity, reliability and security. Security is a general aspect of critical information systems, in any field of application, based on perceived risks and dangers, their analysis being an essential part of security. This paper reveals an incursion of methods for securing critical information systems, presenting techniques for protecting information flows, systems security management methods and an integrated solution for the protection of information systems. The facilities provided by this research contributes to risk mitigation, as well as the insertion of secure technology to strengthen the cyber resilience needed for the integrated protection of critical information systems. Implementation of a holistic integrated security strategy at an organizational level includes measures, processes and technical means, as well as the training of people in the field. In a world where cyber threats are becoming ubiquitous, the ability to apply a specific set of international standards, combined with a dedicated certification program, is one of the best ways to ensure the long-term cyber protection of critical infrastructure.