The widespread use of networks in industrial control systems has led to a number of problems, one of the most pressing being cyber security, or the protection of information with the goal of preventing cyberattacks. This work provides a model that mixes fault tree analysis, decision theory, plus fuzzy theory helps to identify the current reasons of cyberattack prevention failures and (ii) assess the vulnerability of a cybersecurity system. The Fuzzy-based Modified MCDM-TOPSIS Model was used to analyse the cybersecurity risks associated with assaulting websites, e-commerce platforms, and enterprise resource planning (ERP), as well as the potential effects of such assaults. We evaluate these effects, which include data dissemination, data alteration, data loss or destruction, and service disruption, in terms of criteria linked to monetary losses and time for restoration. The model application’s findings show how effective it is and how much more susceptible e-commerce is to cybersecurity threats than websites or ERP, in part because of frequent operator access, credit transactions, and user authentication issues that are exclusive to e-commerce.