RAQAMLI INFRATUZILMA LOYIHALARIDA KIBERXAVFSIZLIK TALABLARINI QABUL DALILLARI BILAN BOG‘LOVCHI BOSHQARUV MODELI

Tojimuradov Maxmadiyor Alisher o‘g‘li

Bank-moliya akademiyasi magistranti

Raimbayev Azim Sultanovcih

Ilmiy rahbar

Keywords: loyiha boshqaruvi, kiberxavfsizlik, raqamli infratuzilma, qabul mezoni, nazorat nuqtasi, RACI, qoldiq xavf.

---

Abstract

Annotatsiya. Maqolada raqamli infratuzilma loyihalarida kiberxavfsizlik talablari loyiha boshqaruvi qarorlaridan uzilib qolishi muammosi ko‘rib chiqiladi. Tog‘-kon sanoatida mahalliylashtirish va sanoat kooperatsiyasini rivojlantirish ilmiy-amaliy markazining «Hujjatlar majmui» hujjat almashish platformasi loyihasi misolida «talab — mas’uliyat — dalil — qaror» zanjiriga asoslangan boshqaruv modeli taklif etiladi. Model beshta nazorat nuqtasi (G0–G4), o‘nta identifikatsiyalangan xavfsizlik talabi, sakkizta xavf ssenariysi, RACI mas’uliyat matritsasi va kompensatsiya qilinmaydigan qabul shartlarini o‘z ichiga oladi. Modelning tamoyillari Buyuk Britaniya, Yevropa Ittifoqi, Germaniya, Estoniya, Singapur va AQSh davlat raqamli xizmatlaridagi yondashuvlar bilan qiyoslangan. Natijalar keysga moslashtirilgan boshqaruv vositasi bo‘lib, ularning samaradorligi pilot tadqiqotda tekshirilishi lozim.

---

References

1. UN DESA. United Nations E-Government Survey 2024. New York: United Nations, 2024.

2. International Telecommunication Union. Global Cybersecurity Index 2024. 5th ed. Geneva: ITU, 2024.

3. Kun.uz. «15 mln kishining ma’lumoti sotuvda turgani yo‘q» — Sherzod Shermatov. 13.02.2026. https://kun.uz/news/2026/02/13/15-mln-kishining-malumoti-sotuvda-turgani-yoq-sherzod-shermatov

4. Spot.uz. Joriy yilda kiberjinoyatchilar o‘zbekistonliklarning 1,9 trln so‘m mablag‘larini o‘g‘irladi. 23.12.2025. https://www.spot.uz/oz/2025/12/23/cyber-crime/

5. Project Management Institute. A Guide to the Project Management Body of Knowledge (PMBOK Guide). 7th ed. Newtown Square, PA: PMI, 2021.

6. ISO 21502:2020 Project, programme and portfolio management — Guidance on project management. Geneva: ISO, 2020.

7. NIST. The NIST Cybersecurity Framework (CSF) 2.0. NIST CSWP 29. 2024. https://doi.org/10.6028/NIST.CSWP.29

8. Souppaya M., Scarfone K., Dodson D. Secure Software Development Framework (SSDF) Version 1.1. NIST SP 800-218. 2022. https://doi.org/10.6028/NIST.SP.800-218

9. Joint Task Force. Risk Management Framework for Information Systems and Organizations. NIST SP 800-37 Rev. 2. 2018. https://doi.org/10.6028/NIST.SP.800-37r2

10. OWASP Foundation. OWASP Top 10:2021. https://owasp.org/Top10/

11. Lawal Y. Integrating Cybersecurity into Project Management: A Scoping Review of Current Practices and Gaps // Journal of Technology Studies. 2025. Vol. 50, No. 1. P. 53–63. https://doi.org/10.21061/jts.430

12. Muxtorov J. B. Davlat xususiy sheriklik loyihalarida loyiha boshqaruvi planini ishlab chiqish // PEDAGOGS. 2024. 58(2). B. 197–199.

13. Shamsiyev K. Raqamli transformatsiya sharoitida loyiha boshqaruvida risk-menejment tizimlarining evolyutsiyasi va samaradorlik ko‘rsatkichlari // Zamonaviy dunyoda amaliy fanlar. 2025. 4(7). B. 111–114.

14. G‘ulomov Sh. Muhim axborot infratuzilmasi obyektlarining raqamli transformatsiyasi sharoitida kiberxavfsizlik bo‘yicha mutaxassislarni amaliyotga yo‘naltirilgan tayyorlash // Muhandislik va iqtisodiyot. 2026. 4(7). B. 329–337.

15. Yin R. K. Case Study Research and Applications: Design and Methods. 6th ed. Thousand Oaks, CA: SAGE, 2018.

16. ISO 31000:2018 Risk management — Guidelines. Geneva: ISO, 2018.

17. ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements. Geneva: ISO, 2019.

18. Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 (NIS 2 Directive) // Official Journal of the European Union. L 333. 27.12.2022.

19. Government Digital Service. Service Standard, point 9: Create a secure service which protects users’ privacy. https://www.gov.uk/service-manual/service-standard/point-9-create-a-secure-service

20. BSI. IT-Grundschutz-Kompendium. Bonn: Bundesamt für Sicherheit in der Informationstechnik, 2023.

21. Riigi Infosüsteemi Amet. Estonian information security standard (E-ITS). https://ria.ee/en/cyber-security/management-state-information-security-measures

22. GovTech Singapore. Instruction Manual for ICT&SS Management (IM8). https://developer.tech.gov.sg/guidelines/standards-and-best-practices/instruction-manual-for-ict-ss-management

23. CISA et al. Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Security-by-Design and -Default. 13.04.2023.