DEVELOPMENT OF A MODEL OF INFORMATION SECURITY THREATS OF THE REGIONAL SEGMENT OF THE ELECTRONIC HEALTHCARE SYSTEM

Electronic health represents a distributed system encompassing federal, regional, local, and individual levels of interaction. From the perspective of information security analysis, the regional level is of the greatest practical interest, as it integrates federal components with local medical information systems and ensures data exchange between healthcare institutions. The objective of this study is to develop an information security threat model for the regional level of an electronic health system, taking into account its architectural and functional features. The research methodology is based on structural modeling and analysis of medical information flows, classification of threats by sources and affected objects, and alignment with current regulatory requirements of the Federal Service for Technical and Export Control (FSTEC) and the Federal Security Service (FSB) of Russia regarding the protection of critical information infrastructure. The study results include a comprehensive threat model for the regional segment of electronic health. The model identifies threats related to integrity and availability breaches during inter-system interactions, administrative errors, insufficient network segmentation, and communication channel compromises. The study concludes that the regional level is the most vulnerable link within the electronic health system. Effective protection requires an integrated set of measures, including cryptographic safeguarding of communication channels, reliable access control, centralized security event monitoring, and incident detection mechanisms.