Providing recommendations for the security of information systems and information networks of citizens, legal entities, and private sector organizations with critical information infrastructure