Development of policies for protecion of critical information infrastructures