The work is devoted to solving the problem of information and cyber security threats actualization to EMERCOM of Russia information infrastructure, information systems and resources. It has been demonstrated that the conditions under which it is solve in the present day differ from those of a «static» and unambiguously regulated system. This has resulted in the emergence of a number of regulatory and legal instruments` problematic issues and has consequently elevated it to the rank of a complex scientific and technical task. It has been demonstrated that the Regulator has altered the basis for the systematization of information security threats. This led to a reduction in the power of their set from 222 to 11 and inspired an innovative approach to developing an authoring technique for threat actualization. Its steps are outlined: 1) preparation of an expert questionnaire in the notation of the Regulator's threat database; 2) interviewing the experts and filling in the questionnaire in electronic form; 3) compiling the interview results into a table, the objective of which is to summarize the frequency with which each of the 171 ways of realizing threats was applied; 4) correlation of «actual» ways with potentially realizable threats and summating of how often each way is used; 5) construction of a histogram of the information and cyber security threat assessment of EMERCOM of Russia information infrastructure, information systems and resources for all 11 threats. Conclusions are drawn regarding the novelty and practical significance of the results obtained, as well as directions for further research.