In modern conditions, ensuring the cyber resilience of enterprise information and telecommunication systems is becoming a priority task that requires accounting for the complex interaction of numerous factors. This paper investigates resilience of information and telecommunication systems through the lens of a process-oriented approach, which focuses on maintaining continuous and secure enterprise operations in the event of cyber incidents. However, one of the current problems lies in the lack of tools for systematic analysis of security factors and their impact on the overall protection of business processes. The aim of the study is to develop a formalized tool for predicting resilience levels, taking into account functional dependencies between factors. The primary research method is conceptual semantic modeling, which enables the formalization of cause-and-effect relationships between system elements. The scientific novelty consists in the development of a model that captures the mutual influence of threats and countermeasures, allowing for the prediction of information and telecommunication system resilience levels as early as the design stage. Using the method for evaluating the correctness of Industrial Control Systems endpoint parameters as an example, the influence of various factors on the effectiveness of the system’s lower-level protection mechanisms is demonstrated. The results presented in the paper help reduce the gap between the theoretical and practical application of the process-oriented approach. They can also serve as a theoretical foundation for developing software tools to support decision-making in selecting business protection measures, based on a balance between potential damage, expected levels of cyber resilience, risks, and security throughout the entire lifecycle
