CRITICAL INFRASTRUCTURE RISK ASSESSMENT APPROACH
DOI:
https://doi.org/10.68302/std2026.vol1.23Keywords:
critical infrastructure, risk, risk managementAbstract
The paper focuses on the activities for improving protection of critical infrastructures and in particular a methodology for the risk assessment of CI assets of the Ministry of Defence (MoD) of the Republic of Bulgaria is presented. It defines the stages through which this process takes place and proposes a mathematical apparatus including analytical expressions for risk assessment. The methodology reveals how experts can measure, document and report risk in this area. It uses universal mathematical models for risk assessment based on adapted scientific theories and methods making it applicable to risk assessment for other CI assets in Bulgaria.
Supporting Agencies
The document was developed under the National Scientific Programme "Security and Defence", funded by the Ministry of Education and Science of the Republic of Bulgaria in implementation of the National Strategy for the Development of Scientific Research 2017-2030, adopted by Decision of the Council of Ministers No. 731 of 21 October 2021.Downloads
References
[1] Radulov I., Dimitrov T., Zdravkov Z., Petrov Zh., "Model for risk management of Critical Infrastructure of the Republic of Bulgaria", DIGILIENCE 2024-ISIJ 55: Open Source Intelligence, Artificial Intelligence, and Human-centered Approaches to Cybersecurity and Countering Disinformation (2024): 44-54, ISSN 0861-5160, e-ISSN 1314-2119,
Available: https://www.researchgate.net/publication/385578897_Model_for_Risk_Management_of_Critical_Infrastructures_of_the_Republic_of_Bulgaria [last viewed: 27 May 2026].
[2] Ordinance on the Procedure, Method and Competent Authorities for the Identification of CIs and their assets and Risk Assessment, in force since 23 Oct. 2012, adopted by Council of Ministers Decree No. 256 of 17 Oct. 2012.
[3] Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32008L0114 [last viewed: 04 September 2024].
[4] Shalamanov, V., et al. "Study for the analysis and evaluation of the system for population protection and emergency response. White Paper on Civil Protection of the Republic of Bulgaria", Research Project No. 12 under the 2004 working program of the Standing Committee on Protection of the Population from Disasters, Accidents and Catastrophes, Available: https://www.scribd.com/document/22546642/Analysis-and-assessment-of-the-civil-protection-system-BG-2004 [last viewed: 27 May 2026].
[5] Risk Assessment and Mapping Guidelines for Disaster Management. SEC(2010)1626 final, EUROPEAN COMMISSION, Brussels, 21.12.2010.
Tagarev T., Pavlov N., "Planning Measures and Capabilities for Protection of Critical Infrastructures", Information & Security: An International Journal, 22, (2007): 38-48. Available: https://www.researchgate.net/publication/269834426_Planning_Measures_and_Capabilities_for_Protection_of_Critical_Infrastructures [last viewed: 27 May 2026].
[6] A Complete Guide to Risk Prioritization Matrix. Best Practices, Tools, and More, July 23rd, 2024, Available: https://www.6sigma.us/six-sigma-in-focus/risk-prioritization-matrix/ [last viewed: 17 September 2024].
[7] Stoyanov, V., Zlateva, P., Kirov, G., Stoyanov, K. "Application of fuzzy logic in forecasting potential losses from natural disasters". Second National Scientific and Practical Conference on Emergency Management and Population Protection, BAS, Sofia, 2007.
[8] Georgiev, V., Risk Management as a Tool of Program Management. Sofia, Military Journal, 2005.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Zarko I. Zdravkov, Ivo G. Radulov
This work is licensed under a Creative Commons Attribution 4.0 International License.
