Annotation: The trend towards automation of security management processes, including in industrial cyber - physical systems (CPS), has led to a change in the role of information security monitoring from solving the problem of conformity assessment to ensuring timely awareness of security management methods – active monitoring. The work is devoted to the formation of requirements for the subsystem of data collection and processing of information security active monitoring. The author systematizes a number of CPS security management tasks, considers examples of methods for solving them, and identifies data structures that are in demand by these methods.

Keywords: information security, security monitoring, security control, industrial cyber-physical systems, data preparation, data structuring, data engineering