The Psychological Aspects of Critical Informational Infrastructure

(Human Security Risk Analysis)

Abstract

The defense against the attacks on IT systems with high social importance depends more and more on the preparedness of the human operators. In the estimation and increasing of this preparedness the psychological selection, sifting and preparation play an important role.
In present article we firstly identify the legal regulators concerning the human security risk factors and we also take a look at their classification into the conceptual framework of the defense of the critical informational infrastructure. In the second part of the article we publish a comprehensive and elaborated process for analysing the human security risks, which was also implemented in practice. Following the identification of the personality traits that are resulting in risky behaviours one can sift those people who could be the targets of social engineering.