Critical infrastructure

Critical infrastructure is a term used by governments to describe assets that are essential for the functioning of a society and economy - the infrastructure. Most commonly associated with the term are facilities for:

Regional critical-infrastructure protection programmes

European Union

The European Programme for Critical Infrastructure Protection (EPCIP) has been laid out in EU Directives by the Commission (EU COM(2006) 786 final). It has proposed a list of European critical infrastructures based upon inputs by its Member States.

Each designated European Critical Infrastructures (ECI) will have to have an Operator Security Plan (OSP) covering the identification of important assets, a risk analysis based on major threat scenarios and the vulnerability of each asset, and the identification, selection and prioritisation of counter-measures and procedures.

Germany

The German critical-infrastructure protection programme is coordinated by the Federal Ministry of the Interior. Some of its special agencies like the German Federal Office for Information Security or the Federal Office of Civil Protection and Disaster Assistance BBK deliver the respective content, e.g., about IT systems.[1]

United Kingdom

In the UK, the Centre for the Protection of National Infrastructure provides information, personnel and physical security advice to the businesses and organisations which make up the UK's national infrastructure, helping to reduce its vulnerability to terrorism and other threats.

It can call on resources from other government departments and agencies, including MI5, the Communications-Electronics Security Group and other Government departments responsible for national infrastructure sectors.

United States

The USA has had a wide-reaching Critical Infrastructure Protection Program in place since 1996. Its Patriot Act of 2001 defined critical infrastructure as those "systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters."

In 2014 the NIST Cybersecurity Framework was published, and quickly became a popular set of guidelines, despite the imposing costs of full compliance.[2]

These have identified a number of critical infrastructures and responsible agencies:

  1. Agriculture and food – Departments of Agriculture and Health and Human Services
  2. WaterEnvironmental Protection Agency
  3. Public Health – Department of Health and Human Services
  4. Emergency Services – Department of Homeland Security
  5. Government – Department of Homeland Security
  6. Defense Industrial BaseDepartment of Defense
  7. Information and TelecommunicationsDepartment of Commerce
  8. EnergyDepartment of Energy
  9. Transportation and ShippingDepartment of Transportation
  10. Banking and FinanceDepartment of the Treasury
  11. Chemical Industry and Hazardous Materials – Department of Homeland Security
  12. Post – Department of Homeland Security
  13. National Monuments and icons - Department of the Interior
  14. Critical Manufacturing - Department of Homeland Security (14th sector announced 03-Mar-2008; recorded 30-Apr-2008)

The National Infrastructure Protection Plan (NIPP)[3] defines critical infrastructure sector in the US. Presidential Policy Directive 21 (PPD-21),[4] issued in February, 2013 entitled Critical Infrastructure Security and Resilience mandated an update to the NIPP. This revision of the plan established the following 16 critical infrastructure sectors:

  1. Chemical
  2. Commercial Facilities
  3. Communications
  4. Critical Manufacturing
  5. Dams
  6. Defense Industrial Base
  7. Emergency Services
  8. Energy
  9. Financial Services
  10. Food and Agriculture
  11. Government Facilities
  12. Healthcare and Public Health
  13. Information Technology
  14. Nuclear Reactors, Materials, and Waste
  15. Transportation Systems
  16. Water and Wastewater Systems

National Monuments and Icons along with the Postal and Shipping sector were removed in 2013 update to the NIPP. The 2013 version of the NIPP has faced criticism for lacking viable risk measures.[5][6] The plan assigns the following agencies sector-specific coordination responsibilities:

  1. Chemical -Department of Homeland Security
  2. Commercial Facilities -Department of Homeland Security
  3. Communications - Department of Homeland Security
  4. Critical Manufacturing -Department of Homeland Security
  5. Dams -Department of Homeland Security
  6. Defense Industrial Base -Department of Defense
  7. Emergency Services - Department of Homeland Security
  8. Energy - Department of Energy
  9. Financial Services - Department of the Treasury
  10. Food and Agriculture -Department of Agriculture
  11. Government Facilities - Department of Homeland Security and General Services Administration
  12. Healthcare and Public Health - Department of Health and Human Services
  13. Information Technology -Department of Homeland Security
  14. Nuclear Reactors, Materials, and Waste - Department of Homeland Security
  15. Transportation Systems -Department of Homeland Security and Department of Transportation
  16. Water and Wastewater Systems - Environmental Protection Agency

See also

References

  1. Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)
  2. "NIST Cybersecurity Framework Adoption Hampered By Costs, Survey Finds". Retrieved 2016-08-02.
  3. National Infrastructure Protection Plan
  4. http://www.whitehouse.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil
  5. White, R. "Toward a Unified Homeland Security Strategy"], "Homeland Security Affairs", February 2014. Retrieved on 26 February 2015.
  6. Kahan, J. "Resilience Redux: Buzzword or Basis for Homeland Security"], "Homeland Security Affairs", February 2015. Retrieved on 28 February 2015.

External links

This article is issued from Wikipedia - version of the 9/10/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.