Research of Information Security Risk Factors in the Telecommunications Sector (Using the Example of the 6TV TV Channel)

Abstract

In the context of widespread digitalization and the increasing dependence of telecommunications companies on information technology, ensuring information security is becoming a critically important aspect of their functioning. The telecommunications sector, including media companies, is among the most vulnerable to cyber-attacks, as it combines the processing of confidential data, the transmission of critical content and the need to ensure the continuity of broadcasting. In this regard, the development of a specialized information security risk assessment model is an urgent task of optimizing the information infrastructure of the TV channel and creating a proactive environment for its safe operation.

The research analyzed the works of reputable scientists, domestic and international standards in the field of
information security, which became the foundation for the development of a hybrid risk management model.

The analysis of the information infrastructure of the TV channel made it possible to analyze the status of assets “equipment”, “data”, “software”, “personnel”, “reputation”. Each asset was assigned a level of criticality that affects the degree of risk, as a result of which the most important assets of the TV channel and their corresponding threats were identified, and criteria for classifying assets by level of importance and degree of threat exposure were developed.

The work performed a qualitative and quantitative risk analysis, resulting in the creation of a matrix of correlation of assets and threats, reflecting the interdependence of various infrastructure elements and specific threats. It isproven that outdated software and low cyber literacy of employees are the main sources of threats. The high probability and severity of a number of threats are confirmed, such as the hacking of the Efir-PRO CMS and the leakage of archived records.

Based on the conducted research, an adaptive hybrid risk assessment model is developed that combines quantitative and qualitative methods, on the basis of which a risk assessment algorithm is demonstrated that makes it possible to effectively assess and rank threats, and an instrumental implementation of the model using RiskWatch platforms and Tenable.io.

The developed risk assessment model makes it possible to increase the security level of the 6TV channel to 85 % and reduce operational risks by 60 %. The use of modern technologies such as machine learning and blockchain will ensure automation of processes and proactive threat management. The model can be applied in other regions with similar challenges, which underlines its versatility and relevance.