Abstract
Ushbu maqolada fintech-kompaniyalari va raqamli bank xizmatlarida yuzaga keladigan kiberxavfsizlik tavakkalini baholashning statistik-huquqiy asoslari tahlil qilinadi. Kiberhodisalarning chastotasi va zarar hajmini baholovchi statistik ko‘rsatkichlar, ekstremal qiymatlar nazariyasi (Extreme Value Theory) asosidagi modellar, operatsion tavakkal doirasidagi zarar taqsimoti yondashuvi (Loss Distribution Approach) hamda kiberxavfsizlik bo‘yicha tavakkal ostidagi qiymat (CyVaR) tushunchasining nazariy mohiyati yoritilgan. Shuningdek, xalqaro standartlar (ISO/IEC 27001, NIST Cybersecurity Framework, PCI DSS, Bazel operatsion tavakkal talablari) va O‘zbekiston milliy qonunchiligi (kiberxavfsizlik va shaxsiy ma’lumotlarni himoya qilish to‘g‘risidagi qonunlar) o‘rtasidagi uzviy bog‘liqlik ko‘rib chiqilgan. Tadqiqot natijalariga ko‘ra, statistik-miqdoriy baholash usullari bilan huquqiy tartibga solish mexanizmlarini birgalikda qo‘llash moliya sektorida kiberxavfsizlik darajasini oshirishning eng samarali yo‘li hisoblanadi.
References
Eling, M., & Wirfs, J. (2019). What are the actual costs of cyber risk events? European Journal of Operational Research, 272(3), 1109–1119.
2. Biener, C., Eling, M., & Wirfs, J.H. (2015). Insurability of Cyber Risk: An Empirical Analysis. The Geneva Papers on Risk and Insurance – Issues and Practice, 40(1), 131–158.
3. NIST (National Institute of Standards and Technology). (2018). Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1. U.S. Department of Commerce (Gaithersburg, AQSH). https://www.nist.gov/cyberframework
4. ISO/IEC 27001:2022. Information security, cybersecurity and privacy protection — Information security management systems — Requirements. International Organization for Standardization (Geneva, Shveytsariya).
5. Basel Committee on Banking Supervision. (2021). Principles for Operational Resilience. Bank for International Settlements (Bazel, Shveytsariya). https://www.bis.org
6. Rahimov, R.O. (2023). O‘zbekiston bank tizimida kiberxavfsizlikni ta’minlashning huquqiy asoslari. O‘zbekiston yuridik jurnali.
7. Tosheva, N.B. (2024). Raqamli moliyaviy xizmatlarda shaxsiy ma’lumotlarni himoya qilish muammolari. Toshkent.
8. O‘zbekiston Respublikasi qonuni. (2022). “Kiberxavfsizlik to‘g‘risida”. O‘zbekiston qonunchilik bazasi (Toshkent). https://lex.uz/uz/search/nat
9. O‘zbekiston Respublikasi qonuni. (2019). “Shaxsiy ma’lumotlar to‘g‘risida”gi Qonunga o‘zgartish va qo‘shimchalar kiritish haqida. O‘zbekiston qonunchilik bazasi (Toshkent). https://lex.uz/uz/search/nat
10. ENISA (European Union Agency for Cybersecurity). (2025). ENISA Threat Landscape Report. ENISA Publications (Afina, Gretsiya). https://www.enisa.europa.eu