Risk-based management of information security of automated control systems of railway transport taking into account cyber-physical specifics

This article examines the application of a risk-based approach to managing the information security of automated process control systems (APCS) in rail transport. The relevance of the study lies in their cyber-physical nature, where cyberattacks can lead to direct physical consequences that compromise safety. The author analyzes specific threats and vulnerabilities and proposes an adapted risk management model that includes the stages of identifying critical assets taking into account their physical impact, assessing cyber-physical incident scenarios, and selecting countermeasures integrated into technological processes.