Critical Infrastructure Sector
Each national or international strategy and policy identifies different categories of sectors that are considered to offer vital services and thus require protection. A 2008 survey examined the policies of 25 countries and identifies as the most frequently mentioned the following sectors, taken up later in the [1]:
- Banking and Finance (Sektor kritične infrastrukture, ki zagotavlja finance)
- Central Government / Government Services [?]
- (Tele-)Communication / Information and Communication Technologies (ICT) (Sektor kritične infrastrukture, ki zagotavlja informacijsko in komunikacijsko podporo)
- Emergency / Rescue Services [?]
- Energy / Electricity (Sektor kritične infrastrukture, ki zagotavlja energetsko podporo)
- Health Services (Sektor kritične infrastrukture, ki zagotavlja zdravstveno oskrbo)
- Transportation / Logistics / Distribution (Sektor kritične infrastrukture, ki zagotavlja prometne povezave)
- Water (supply) (Sektor kritične infrastrukture, ki zagotavlja preskrbo s pitno vodo)
- Food (Sektor kritične infrastrukture, ki zagotavlja preskrbo s hrano)
- Envoronmental Protection (Sektor kritične infrastrukture, ki zagotavlja varstvo okolja)
The study comments that "these are the core sectors of modern societies, and possibly the areas where a large-scale interruption would be most devastating" [2].
Contents
- 1 Definitions
- 1.1 European Definitions
- 1.2 Other International Definitions
- 1.3 National Definitions
- 1.3.1 Argentina
- 1.3.2 Australia
- 1.3.3 Austria
- 1.3.4 Azerbaijan
- 1.3.5 Bahrein
- 1.3.6 Bangladesh
- 1.3.7 Belgium
- 1.3.8 Brazil
- 1.3.9 Canada
- 1.3.10 Chile
- 1.3.11 Congo
- 1.3.12 Croatia
- 1.3.13 Czech Republic
- 1.3.14 Denmark
- 1.3.15 El Salvador
- 1.3.16 Estonia
- 1.3.17 Finland
- 1.3.18 France
- 1.3.19 Germany
- 1.3.20 Ghana
- 1.3.21 India
- 1.3.22 Indonesia
- 1.3.23 Japan
- 1.3.24 Jersey
- 1.3.25 Kuwait
- 1.3.26 Malaysia
- 1.3.27 Moldova
- 1.3.28 Montenegro
- 1.3.29 Netherlands
- 1.3.30 North Macedonia
- 1.3.31 Norway
- 1.3.32 Pakistan
- 1.3.33 Papua New Guinea
- 1.3.34 Poland
- 1.3.35 Qatar
- 1.3.36 Republic of Korea
- 1.3.37 Republic of Trinidad & Tobago
- 1.3.38 Sierra Leone
- 1.3.39 Singapore
- 1.3.40 Slovakia
- 1.3.41 Slovenia
- 1.3.42 Spain
- 1.3.43 Sweden
- 1.3.44 Switzerland
- 1.3.45 Türkiye
- 1.3.46 United Arab Emirates
- 1.3.47 United Kingdom (UK)
- 1.3.48 United States
- 1.3.49 Vietnam
- 1.3.50 Virgin Islands
- 1.4 Other Definitions
- 2 See also
- 3 Notes
- 4 References
Definitions
European Definitions
Council Directive 2022/2557 (CER Directive)
Sectors | Subsectors | Categories of entities |
---|---|---|
1. Energy | (a) Electricity | Electricity undertakings as defined in Article 2, point (57), of [3]of the European Parliament and of the Council, which carry out the function of ‘supply’ as defined in Article 2, point (12), of that Directive |
Distribution system operators as defined in Article 2, point (29), of [3] | ||
Transmission system operators as defined in Article 2, point (35), of [3] | ||
Producers as defined in Article 2, point (38), of [3] | ||
Nominated electricity market operators as defined in Article 2, point (8), of [4] of the European Parliament and of the Council | ||
Market participants as defined in Article 2, point (25), of [4] providing aggregation, demand response or energy storage services as defined in Article 2, points (18), (20) and (59), of [3] | ||
(b) District heating and cooling | Operators of district heating or district cooling as defined in Article 2, point (19), of Directive (EU) 2018/2001 of the European Parliament and of the Council | |
(c) Oil | Supply undertakings as defined in Article 2, point (8), of [5] of the European Parliament and of the Council | |
Operators of oil production, refining and treatment facilities, storage and transmission | ||
Central stockholding entities as defined in Article 2, point (f), of Council of [6] | ||
(d) Gas | Supply undertakings as defined in Article 2, point (8), of [5] of the European Parliament and of the Council | |
Distribution system operators as defined in Article 2, point (6), of [5] | ||
Transmission system operators as defined in Article 2, point (4), of [5] | ||
Storage system operators as defined in Article 2, point (10), of [5] | ||
Operators of natural gas refining and treatment facilities | ||
(e) Hydrogen | Operators of hydrogen production, storage and transmission | |
2. Transport | (a) Air | Air carriers as defined in Article 3, point (4), of Regulation (EC) No 300/2008 used for commercial purposes |
Airport managing bodies as defined in Article 2, point (2), of Directive 2009/12/EC of the European Parliament and of the Council (6), airports as defined in Article 2, point (1), of that Directive, including the core airports listed in Section 2 of Annex II to Regulation (EU) No 1315/2013 of the European Parliament and of the Council (7), and entities operating ancillary installations contained within airports | ||
Traffic management control operators providing air traffic control (ATC) services as defined in Article 2, point (1), of Regulation (EC) No 549/2004 of the European Parliament and of the Council | ||
(b) Rail | Infrastructure managers as defined in Article 3, point (2), of Directive 2012/34/EU of the European Parliament and of the Council | |
Railway undertakings as defined in Article 3, point (1), of Directive 2012/34/EU and operators of service facilities as defined in Article 3, point (12), of that Directive | ||
(c) Water | Inland, sea and coastal passenger and freight water transport companies, as defined for maritime transport in Annex I to Regulation (EC) No 725/2004, not including the individual vessels operated by those companies | |
Managing bodies of ports as defined in Article 3, point (1), of Directive 2005/65/EC, including their port facilities as defined in Article 2, point (11), of Regulation (EC) No 725/2004, and entities operating works and equipment contained within ports | ||
Operators of vessel traffic services (VTS) as defined in Article 3, point (o), of Directive 2002/59/EC of the European Parliament and of the Council (10) | ||
(d) Road | Road authorities as defined in Article 2, point (12), of Commission Delegated Regulation (EU) 2015/962 (11) responsible for traffic management control, excluding public entities for whom traffic-management or the operation of intelligent transport systems is a non-essential part of their general activity | |
Operators of Intelligent Transport Systems as defined in Article 4, point (1), of Directive 2010/40/EU of the European Parliament and of the Council | ||
(e) Public Transport | Public service operators as defined in Article 2, point (d), of Regulation (EC) No 1370/2007 of the European Parliament and of the Council | |
3. Banking | Credit institutions as defined in Article 4, point (1), of Regulation (EU) No 575/2013 | |
4. Financial market infrastructure | Operators of trading venues as defined in Article 4, point (24), of Directive 2014/65/EU | |
Central counterparties (CCPs) as defined in Article 2, point (1), of Regulation (EU) No 648/2012 | ||
5. Health | Healthcare providers as defined in Article 3, point (g), of Directive 2011/24/EU of the European Parliament and of the Council | |
EU reference laboratories as referred to in Article 15 of Regulation (EU) 2022/2371 of the European Parliament and of the Council | ||
Entities carrying out research and development activities of medicinal products as defined in Article 1, point (2), of Directive 2001/83/EC of the European Parliament and of the Council | ||
Entities manufacturing basic pharmaceutical products and pharmaceutical preparations as referred to in Section C division 21 of NACE Rev. 2 | ||
Entities manufacturing medical devices considered as critical during a public health emergency (‘public health emergency critical devices list’) within the meaning of Article 22 of Regulation (EU) 2022/123 of the European Parliament and of the Council | ||
Entities holding a distribution authorisation as referred to in Article 79 of Directive 2001/83/EC | ||
6. Drinking Water | Suppliers and distributors of water intended for human consumption as defined in Article 2, point (1)(a), of Directive (EU) 2020/2184 of the European Parliament and of the Council (18), excluding distributors for which distribution of water for human consumption is a non-essential part of their general activity of distributing other commodities and goods | |
7. Waste Water | Undertakings collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water as defined in Article 2, points (1), (2) and (3), of Council Directive 91/271/EEC (19), excluding undertakings for which collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water is a non-essential part of their general activity | |
8. Digital infrastructure | Providers of internet exchange points as defined in Article 6, point (18), of [7] | |
DNS service providers as defined in Article 6, point (20), of [7], excluding operators of root name servers | ||
top-level-domain name registries as defined in Article 6, point (21), of [7] | ||
Providers of cloud computing services as defined in Article 6, point (30), of [7] | ||
Providers of data centre services as defined in Article 6, point (31), of [7] | ||
Providers of content delivery networks as defined in Article 6, point (32), of [7] | ||
Trust service providers as defined in Article 3, point (19), of Regulation (EU) No 910/2014 of the European Parliament and of the Council | ||
Providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972 of the European Parliament and of the Council (21) | ||
Providers of electronic communications services as defined in Article 2, point (4), of Directive (EU) 2018/1972 insofar as their services are publicly available | ||
9. Public administration | Public administration entities of central governments as defined by Member States in accordance with national law | |
10. Space | Operators of ground-based infrastructure, owned, managed and operated by Member States or by private parties, that support the provision of space-based services, excluding providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972 | |
11. Production, processing and distribution of food | Food businesses as defined in Article 3, point (2), of Regulation (EC) No 178/2002 of the European Parliament and of the Council (22) which are engaged exclusively in logistics and wholesale distribution and large scale industrial production and processing |
Council Directive 2008/114/EC
The EU directive identifies the following two sectors and their respective sub-sectors [8]:
I Energy
- Electricity: Infrastructures and facilities for generation and transmission of electricity in respect of supply electricity
- Oil: Oil production, refining, treatment, storage and transmission by pipelines
- Gas: (a) Gas production, refining, treatment, storage and transmission by pipelines, (b) LNG terminals
II Transport
- Road transport
- Rail transport
- Air transport
- Inland waterways transport
- Ocean & short sea shipping and ports
Resilience of critical entities COM/2020/829 final
The EU proposed directive identifies the following sectors and their respective sub-sectors [9]:
Sector | Subsector |
---|---|
Energy | Electricity |
District Heating | |
Oil | |
Gas | |
Hydrogen | |
Transport | Air |
Rail | |
Water (inland, sea, coastal passenger and freight; ports) | |
Road | |
Banking | |
Financial Market Infrastructures | |
Health | |
Drinking Water | |
Waste Water | |
Digital Infrastructure | (IX, DSN, TLD, Cloud, Data centre service, Content delivery, Trust services, NIS Directive) |
Public Administration | |
Space | (ground-based infrastructure) |
Other International Definitions
UNISDR
UNISDR presents the following examples of critical infrastructures:
National Definitions
Argentina
Líneas vitales/Infraestructuras críticas SUBSECRETARÍA DE PROTECCIÓN CIVIL Y ABORDAJE INTEGRAL DE EMERGENCIAS Y CATÁSTROFES (1/2015):
- Energía: presas, subestaciones, líneas de fluido eléctrico, plantas de almacenamiento de combustibles, oleoductos, gasoductos.
- Transporte: redes viales, puentes, terminales de transporte, aeropuertos, puertos fluviales y marítimos.
- Agua: plantas de tratamiento, acueductos, alcantarillados, canales de irrigación y conducción.
- Comunicaciones: redes y plantas telefónicas, estaciones de radio y televisión, oficinas de correo e información pública.
Australia
In 2023, the Australian critical infrastructure includes the following sectors [12]:
- Communications
- Financial services and markets
- Data storage or processing
- Defence industry
- Higher education and research
- Energy
- Food and grocery
- Health care and medical
- Space technology
- Transport
- Water and sewerage
Australia recognises 22 Critical Infrastructure assets as part of these sectors. [13]
Formerly, Australia's national critical infrastructure is categorised by seven critical sectors [14]:
- Energy
- Water services
- Communications
- Transport
- Food Chain
- Health
- Banking & Finance
Austria
Austria's national critical infrastructure is categorised by thirteen critical sectors [15]:
- Energy
- ICT
- Water
- Food
- Health
- Finance
- Transport
- Chemical industry
- Research
- Constitutional institutions
- Social system
- Distribution system
- Search and Rescue
Azerbaijan
Defined by decreet "Azərbaycan Respublikasında kritik informasiya infrastrukturunun təhlükəsizliyinin təmin edilməsi qaydaları”nın təsdiq edilməsi haqqında" [16]
- dövlət idarəçiliyi
- müdafiə
- səhiyyə
- maliyyə bazarları
- energetika
- nəqliyyat
- informasiya texnologiyaları
- telekommuni kasiya
- su təchizatı və ya ekologiya sahələri üzrə informasiya sistemləri
- avtomatlaşdırılmış idarəetmə sistemləri və informasiya kommunikasiya şəbəkələri vasitəsilə həyata keçirilən fəaliyyət prosesləri müəyyən edilir
Bahrein
The seven CNI sectors [17] [18] are:
- الغاز والكهرباء والنفط Gas, Electricity & Oil
- الخدمات الصحية Health services
- الخدمات المالية Financial services
- الخدمات الحكومية Governmental services
- المواصلات Transportation
- تكنولوجيا المعلومات والاتصالات ICT
- الصناعات المهمة Critical Industry
Bangladesh
Bangladesh Critical Infrastructure is categorised by seven critical sectors [19]:
- Energy (oil, gas)
- Telecommunications
- Transport (road)
- Monuments/Buildings
- Water
- Financial sector
- ICT
Belgium
Belgium's National Critical Infrastructure is categorised by four critical sectors [20]:
- Energy (electric power, oil, gas)
- Transport (road, rail, air, inland shipping, sea and ocean shipping & harbours)
- Financial sector
- Electronic Communication
Although another law applies, the Space sector is likewise treated as a Critical Infrastructure.
Brazil
Subsetor: é um nível de especialização de um segmento de Infraestrutura Crítica, constituído por organizações privadas ou públicas responsáveis pelos ativos de informação para os quais serão definidos controles a fim de atender requisites mínimos de segurança.[21]
Canada
Canada's national infrastructure is categorised by ten critical sectors [22]:
- Health
- Food
- Finance
- Water
- Information and Communication Technology
- Safety
- Energy and utilities
- Manufacturing
- Government
- Transportation
Chile
Chile's national critical information infrastructure is categorised by the following critical sectors: [23] [24]}}
- energía (energy)
- telecomunicaciones (telecommunications)
- agua (water)
- salud (health)
- servicios financieros (financial services)
- seguridad pública (public safety)
- transporte (transport)
- administración pública (civil service)
- protección civil (civil protection)
- defense(defence)
Congo
Condo has defined 23 critical infrastructure (sub)sectors in [25]:
- REGALIEN Administration publique (Government/Administration services)
- Energie - Électricité
- Energie - Petrole
- Energie - Gas
- Transports – aérien (air transport)
- Transports – Transport guidé (passenger transport)
- Transports – Transport par voie d’eau (transport over waterways)
- Transports – Transport routier (road transport)
- TRANSPORT - Organisation
- Transport - AÉRIEN securité (Air transport (system) security)
- Logistique
- Banques (Banks)
- INFRASTRUCTURES DE MARCHÉS FINANCIERS (Financial markets infrastructures)
- Assurance
- Social
- SANTÉ – Établissements de soins de santé (y compris les hôpitaux et les cliniques privées)
- SANTÉ – Produits pharmaceutiques
- FOURNITURE ET DISTRIBUTION D’EAU POTABLE (Drinking water)
- TRAITEMENT DES EAUX NON POTABLES (other water related services)
- INFRASTRUCTURES NUMÉRIQUES (Cyber infrastructures)
- Education
- Restauration (Food)
- AVIATION CIVILE
Croatia
Potentially eleven Critical Infrastructure Sectors have been identified by [26]:
- Energetika - Energy (production, including reservoirs and dams, transmission, storage, transportation fuels and energy distribution systems)
- Komunikacijska i informacijska tehnologija - Communication and information technology (electronic communication, data transmission, information systems, providing audio and audiovisual media services)
- Promet - Transport (road, rail, air, sea and inland waterway)
- Zdravstvo - Public Health (health care, manufacturing, marketing and supervision of medicinal products)
- Vodno gospodarstvo - Water Management (control and protective water structures and municipal water structures)
- Hrana - Food (production and food supply and food safety system, stockpiles)
- Financije - Finance (banking, stock exchanges, investment, insurance and payment systems)
- Proizvodnja, skladištenje i prijevoz opasnih tvari - Production, storage and transport of dangerous goods (chemical, biological, radiological and nuclear materials)
- Javne službe - Public sector (insurance of public order, protection and rescue, emergency medical services)
- Nacionalni spomenici i vrijednosti - National monuments and valuables
- Science and Education
Czech Republic
Czech Republic's national critical infrastructure is categorised by nine critical sectors [27]:
- Energy
- Water management
- Food industry and agriculture
- Health services
- Transport
- Communication and information systems
- Financial market and currency
- Emergency Services
- Public administration
Denmark
Denmark defined critical societal functions instead of critical sectors[28] [29]:
- Energy: Supply of electricity, natural gas, crude oil, fuel, etc.
- Information and communications technology (ICT): Phone, internet, information networks, processing and transmission of data, navigation, satellite/radio/TV transmission, post and courier services, etc.
- Transport: Carrying out, monitoring and controlling passenger and cargo transport (road, rail, air and sea), monitoring and controlling of infrastructure (bridges, tunnels, stations, airports, harbours), etc.
- Water: Supply of drinking water and waste water disposal.
- Food: Supply of food, supervision of food safety, monitoring and responding to contagious animal diseases and zoonoses.
- Finance: Money transmission and transfer services, banking and insurance, securities trading, etc.
- Fire and rescue services, police tasks, military assistance to civil authorities, etc.: # Alarming and alerting, on-scene coordinating and technical incident command, cordoning off, fire fighting, search and rescue (land/sea/air), evacuation (incl. reception, housing and catering), environmental pollution response, storm surge preparedness, snow-preparedness, public order enforcement, explosive ordnance disposal, control of production, storage and transport of hazardous materials (chemical, biological, radiological, nuclear, explosive), and response to incidents that do or may involve hazardous materials.
- Health and social services: Prehospital services, hospitals, practising physicians, production and distribution of pharmaceuticals, supervisory systems, day-care and residential institutions, home care, etc.
- Defence, intelligence and security services: Military defence and enforcement of sovereignty, counter-terrorism, counter-extremism, counter-espionage, personal protection, etc.
- Exercise of authority (all levels): Crisis management capacity, maintenance of parliamentary, governmental, central administrative, judicial, municipal and regional authority.
El Salvador
El Salvador's basic and essential infrastructure is categorised by four sectors [30]:
- Energía: presas, subestaciones, líneas de fluido eléctrico, plantas de almacenamiento de combustibles, oleoductos, gasoductos.
- Transporte: redes viales, puentes, terminales de transporte, aeropuertos, puertos fluviales y marítimos.
- Agua: plantas de tratamiento, acueductos, alcantarillados, canales de irrigación y conducción.
- Comunicaciones: redes y plantas telefónicas, estaciones de radio y televisión, oficinas de correo e información publica.
Or:
- Energy: dams, substations, electric fluid lines, fuel storage plants, oil pipelines, pipelines.
- Transport: road networks, bridges, transport terminals, airports, river and maritime ports.
- Water: treatment plants, aqueducts, sewage systems, irrigation canals and conduction.
- Communications: networks and telephone plants, radio and television stations, post offices and public information.
Estonia
Estonia's critical infrastructure is categorised by nine critical sectors [31]:
- Energy facilities and networks: electricity, oil and gas storage facilities and refineries, transmission and distribution systems
- Communications and information technology: telecommunications, transmission and notification systems, software, hardware and networks, including the infrastructure of the Internet
- Finance: banking, securities and investment
- Health care: hospitals, health care facilities, laboratories and medicines, search, rescue and ambulance services
- Food: safety, means of production, wholesale and food industry
- Water: water reservoirs, water treatment plants and water networks
- Transport: airports, ports, inter-modal transport facilities, rail and mass transit networks, traffic control systems
- Production, storage and transport of dangerous goods: chemical, biological, radiological and other hazardous materials
- State agencies: critical services, facilities, information networks; information systems ensuring national security and defence, resources, databases and court registers with legal effect, and national cultural assets.
Finland
In 2010, Finland defined the following set of vital functions [32] (Suomalaisen yhteiskunnan elintärkeitä toimintoja ovat) [33]:
- management of Government affairs (valtion johtamine)
- international activity (kansainvälinen toiminta)
- Finland’s defence capability (Suomen puolustuskyky)
- internal security (sisäinen turvallisuus)
- functioning of the economy and infrastructure (talouden ja infrastruktuurin toimivuus)
- the population’s income security and capability to function (väestön toimeentuloturva ja toimintakyky), and
- psychological resilience to crisis (henkinen kriisinkestävyys)
France
A critical infrastructure sector is defined as follows:
An unofficial translation follows:
Below a list of the sectors and the responsible ministry can be found. [35] [36].
Critical Sector | Responsible Ministry |
---|---|
Civilian activities | Ministry of Home Affairs |
Legal activities | Ministry for Justice |
Military activities of the State | Ministry of Defence |
Food | Ministry for Agriculture |
Communication, technologies and broadcasting | Ministry for Electronic communications |
Energy | Ministry for Energy |
Space and Research | Ministry of Research |
Finance | Ministry of the Economy and Finance |
Water management | Ministry for Ecology |
Industry | Ministry for Industry |
Health | Ministry of Health |
Transport | Ministry of Transport |
Germany
In Germany, the following sectors (and industries) are assigned to critical infrastructures [37]:
- Transport and traffic (aviation, maritime shipping, inland waterway transport, rail traffic, road traffic, logistics)
- Energy (electricity, mineral oil, gas)
- Information technology and telecommunication (telecommunication, information technology)
- Finance and insurance sector (banks/financial institutes, insurance companies, financial service providers, stock exchanges)
- State and administration (government and administration, parliament, judicial institutions, emergency and rescue services including disaster control)
- Food (food industry, food trade)
- Water (public water supply, public wastewater disposal)
- Health (medical care, pharmaceuticals and vaccines, laboratories)
- Media and culture (broadcasting (television and radio), printed and electronic press, cultural assets, highly symbolic buildings)
In Deutschland werden folgende Sektoren (und Branchen) den Kritischen Infrastrukturen zugeordnet:
- Transport und Verkehr (Luftfahrt, Seeschifffahrt, Binnenschifffahrt, Schienenverkehr, Straßenverkehr, Logistik)
- Energie (Elektrizität, Mineralöl, Gas)
- Informationstechnik und Telekommunikation (Telekommunikation, Informationstechnik)
- Finanz- und Versicherungswesen (Banken, Versicherungen, Finanzdienstleister, Börsen)
- Staat und Verwaltung (Regierung und Verwaltung, Parlament, Justizeinrichtungen, Notfall- und Rettungswesen einschließlich Katastrophenschutz)
- Ernährung (Ernährungswirtschaft, Lebensmittelhandel)
- Wasser (Öffentliche Wasserversorgung, öffentliche Abwasserbeseitigung)
- Gesundheit (Medizinische Versorgung, Arzneimittel und Impfstoffe, Labore)
- Medien und Kultur (Rundfunk (Fernsehen und Radio), gedruckte und elektronische Presse, Kulturgut, symbolträchtige Bauwerke)
Ghana
Ghana defines the following ten sectors to be part of their Critical National Infrastructure [38]:
- National Defense and Security
- Banking and Finance
- Information and Communications
- Energy
- Transportation
- Water
- Health Services
- Government
- Emergency Services
- Food and Agriculture
India
The sectors that have been designated as critical are: [40]
- Defence
- Banking and financial sector
- ICT and telecommunication
- Transportation
- Power
- Energy
- Ministry of Home Affairs
- Ministry of External Affairs
- Ministry of Heavy Industries
- Niti Ayog (the erstwhile Planning Commission)
However, in 2015 the NCIIPC [41] presented the following list of critical sectors:
- Energy
- Transportation (air, surface, rail & water)
- Banking & Finance
- Telecommunication
- Defence
- Space
- Law enforcement, security & intelligence
- Sensitive Government organisations
- Public Health
- Water supply
- Critical manufacturing
- E-Governance
Indonesia
Infrastruktur kritis nasional yakni infrastruktur pada sektor-sektor [42]:
- Energi (energy)
- Transportasi (transport)
- keuangan dan perbankan (finances and banking)
- telekomunikasi (telecommunication)
- pertahanan (defence)
- penegakan hokum (law enforment)
- keamanan dan intelijen (security and intelligence services)
- kesehatan (health)
- suplai air (drinking water)
- tata kelola elektronik (e-Governance)
- industri kritis (critical industry)
- organisasi-orgaisasi sensitif (sensitive organisations)
- dan luar angkasa (space)
Japan
Japan's national critical infrastructure is categorised by thirteen critical sectors: [43], [44], [45]:
- Information and communication services (情報通信)
- Financial services (金融)
- Aviation services (航空)
- Railway services (鉄道)
- Electric power supply services (電力)
- Gas supply services (ガス)
- Government and administrative services (including local public authorities)
(政府・行政サービス(地方公共団体を含む)) - Medical services (医療)
- Water services (水道)
- Logistics services (物流)
- Chemical industries (化学)
- Credit card services (クレジット)
- Petroleum industries (び「石油)
Jersey
Jersey's critical national infrastructure is categorised by the following eight critical sectors: [46]
- Electricity
- Gas
- Communications
- Transport (including Ports and Airport)
- Emergency services
- Public services
- Health
- Water
Kuwait
Kuwait's critical national infrastructure is categorised by the following eight vital sectors: [47],[48]
- Oil sector القطاع النفطي
- Military sector القطاع الع�صكري
- Energy sector and electricity and water قطاع الطاقة والكهرباء واملاء.
- Financial sector القطاع املايل.
- Communications, telecommunication and information technology sector قطاع االت�صاالت وتكنولوجيا املعلومات.
- Transport sector قطاع النقل.
- Health sector القطاع ال�صحي.
- Other government entities .اجلهات احلكومية الأخرى.
Malaysia
Malaysia's National Critical Information Infrastructure (CNII):[49]
- National Defence & Security
- Banking & Finance
- Information & Communications
- Energy
- Transportation
- Water
- Health Services
- Government
- Emergency Services
- Food & Agriculture
Moldova
Moldova recognises 11 sectors and 28 subsectors in [50]:
Sectorul (Sector) | Subsectorul (subsector) |
Energetic (Energy) | a) Activitățile de depozitare a petrolului și gazelor, inclusiv a conductelor; b) Transportul de energie electrică, gaze și petrol; c) Activitățile de distribuție a electricității, a energiei termice, gazului, petrolului |
Tehnologia informației și comunicații (ICT) | a) Infrastructura rețelelor și serviciilor de comunicații electronice; b) Sisteme de prelucrare, procesare și stocare a datelor, inclusiv a serviciilor publice electronice; c) Infrastructura de securitate informatică; d) Serviciul poștal universal |
Alimentare cu apă (Water supply) | a) Furnizare de apă potabilă; b) Controlul calității apei; c) Îndiguirea și controlul calităţii apei |
Alimentația (food security and safety) | Asigurarea securității și siguranței alimentelor |
Sănătate (Health) | a) Asistența medicală; b) Medicamente,vaccinuri, produse farmaceutice; c) Biolaboratoare și bioagenți; d) Sînge şi preparate sanguine |
Financiar (Financial) | a) Servicii de plăți/structuri aferente; b) Sisteme financiare guvernamentale |
Securitate (Security) | a) Apărarea țării, ordinea publică și siguranță națională; b) Managementul integrat al frontierelor |
Administrație | a) Serviciile și administrația; b) Administrarea misiunilor diplomatice ale Republicii Moldova în statele străine |
Transporturi (Transport) | a) Transportul auto; b) Transportul feroviar; c) Transportul aerian; d) Transportul naval |
Industria chimică, biologică, nucleară (Chemical, biological and nuclear industry) |
Producția, procesarea, depozitarea și utilizarea substanțelor explozibile, chimice, biologice și materialelor nucleare și radioactive |
Locurile de aglomerare în masă a populației (Places of mass agglomeration of the population) |
Locul de mare aglomerare a populaţiei, unde, în anumite circumstanței, pot să se află, concomitent, de la 50 persoane și mai mult |
Montenegro
Za sektore KI u kojima se vrši određivanje KI prepoznati su: [51]
Sektore |
Energetika |
Saobraćaj |
Snabdijevanje vodom |
Zdravstvo |
Finansije |
Elektronske komunikacije |
Informaciono komunikacione tehnologije |
Zaštita životne sredine |
Funkcionisanje državnih organa |
kao i druge oblasti od javnog interesa |
Netherlands
The 2015 Critical Infrastructure review redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the Critical Infrastructure table below were announced [52] [53]. Later, road and rail transport were added (again).
Critical Processes | Category | Product, service or location | Sector | Responsible Ministry |
---|---|---|---|---|
National transport and distribution of power | A | Electricity | Energy | Economic Affairs and Climate Policy |
Regional distribution of electricity | B | |||
Gas production National transport and distribution of gas |
A | Gas | ||
Regional distribution of gas | B | |||
Oil supply | A | Oil | ||
Internet and data services | B | Internet and data services | ICT/Telecom | |
Internet access and data traffic | B | Internet access and data traffic | ||
Voice services and text messaging | B | Voice services and text messaging | ||
Geolocation and time information by GNSS | B | GNSS | Infrastructure and Water Management | |
Drinking water supply | A | Drinking water | Drinking water | |
Flood defences and water management | A | (part of) primary flood defences, regional flood defences | Water | |
Air Traffic | B | Air Traffic Control (ATC) and aircraft handling | Transport | |
Vessel Traffic Service | B | Vessel Traffic Service (Port of Rotterdam) | ||
Transport of persons and goods by (main) railway infrastructure | B | Main rail infrastructure | ||
Transport by (main) road infrastructure | B | Main road infrastructure (highways, key tunnels and bridges) | ||
Large-scale production/processing and storage of chemicals and petrochemicals | B | Chemical and petrochemical industry | Chemistry | |
Storage, production and processing of nuclear materials | A | Nuclear | Nuclear | |
Retail transactions | B | Financial transactions | Financial | Finance |
Consumer financial transactions | B | |||
High-value transactions between banks | B | |||
Securities trading | B | |||
Emergency Services communication (1-1-2 and C2000) | B | Communication with and between emergency services through the 112 emergency number and C2000 | Public Order and Safety (OOV) | Justice and Security |
Police Deployment | B | |||
Personal and organisational record databases | B | Digital government | Public Administration | The Interior and Kingdom Relations |
Interconnectivity between record databases | B | |||
Electronic messaging and information disclosure to citizens | B | |||
Identification and authentication of citizens and organisations | B | |||
Military deployment | B | Military deployment Armed Forces | Defence | Defence |
The Netherlands' national infrastructure was (2005 definition) categorised by twelve critical sectors and 31 subsectors [54]:
- Energy: electric power, gas, and oil
- Telecommunications and IT: fixed and mobile communications, radio, broadcasting, internet, and postal and courier services
- Drinking water (supply)
- Food: food supply, and food safety
- Health: emergency and other hospital care, medicines, and vaccines
- Financial services: payments (bank retail), and financial transfers by the Administration
- Surface water: water quality and water quantity (stemming and managing)
- Public order and safety
- Legal order/justice: courts and detention, and law enforcement
- Public administration: diplomacy, information services by the Administration, defence, and decision-making
- Transport: mainport Schiphol, mainport Rotterdam, main road infrastructure, main inland shipping infrastructure, and rail infrastructure
- Chemical and nuclear industry: transport, storage, production, and processing of dangerous materials
Each critical sector falls under the responsibility of a designated ministry.
North Macedonia
New Macedonia recognises five critical infrastructure sectors:
- Energy (production, transmission and distribution)
- Water supply
- Environment
- Macedonian radio and television, electronic and print media
- National Bank of North Macedonia and other registered legal banking entities
Norway
Norway distinguishes six critical infrastructures and eleven critical societal functions. Critical infrastructures:
- Electric Power (kraft)
- Electronic communications (elektronisk kommunikasjon)
- Water supply and Sewage (vann og avløp)
- Transport (transport)
- Oil and Gas (olje og gass)
- Satellite-based infrastructure (satellittbasert kommunikasjon og navigasjon)
In 2006, three additional critical sectors existed, which have shifted to critical societal functions later [56]:
- Banking and Finance (bank og finans)
- Monuments and symbols (kulturminner og symboler)
- Food Supply (matforsyning)
Critical Societal Functions (Kritisk samfunnsfunksjon er det mest sentrale begrepet i definisjonsapparatet):
- Banking and Finance (bank og finans)
- Food Supply (matforsyning)
- Health Services, Social Services and Social Security Benefit (helse-, sosial- og trygdetjenester)
- Police (politi)
- Emergency and Rescue Services (nød- og redningstjeneste)
- Crisis Management (kriseledelse)
- Parliament and Government (storting og regjering)
- The Judiciary (domstolene)
- Defence (forsvaret)
- Environmental Surveillance (miljøovervåkning)
- Waste Treatment (renovasjon)
Pakistan
Critical Sector [57]
- Government systems
- utility infrastructure (electricity, gas, and water)
- education
- health
- transport systems (air, road, rail, and sea)
- emergency services
- manufacturing facilities
- banking and financial sector
- telecommunication/ ICT sector
- dams
- etc.
Papua New Guinea
Critical Infrastructure[58] at least:
- transportation
- communication systems
- water supply
- electricity supply
- banking services
- public institutions including health services, post offices and education services.
Poland
Poland distinguishes the following critical infrastructure sectors / functions: [59]
- Banking and financial systems (finansowe)
- Health (ratownicze)
- Communication and computer systems (łączności, sieci teleinformatycznych)
- Transport (transportowe)
- Rescue systems (ochrony zdrowia)
- Systems ensuring functioning of the public administration (zapewniające ciągłość działania administracji publicznej)
- Food and water provision systems (zaopatrzenia w żywność & zaopatrzenia w wodę)
- Energy and fuel provision systems (zaopatrzenia w energię, surowce energetyczne i paliwa)
- Systems that deal with the production, use, storage of chemical and radioactive substances, and also dangerous substance pipelines (produkcji, składowania, przechowywania i stosowania substancji chemicznych i promieniotwórczych, w tym rurociągi substancji niebezpiecznych)
- ensuring the continuity of public administration (zapewniające ciągłość działania administracji publicznej).
Qatar
The critical sectors which comprise Qatar's national critical infrastructure include but are not restricted to [60] [61] :
- Energy, Electricity, and Water (قطاع الطاقة والكهرباء والماء)
- Finance (القطاع الما ي ل)
- Government (القطاع الحكومي)
- Healthcare (قطاع الرعاية الصحية)
- Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
- Transportation (قطاع النقل والمواصلات)
Republic of Korea
Nine critical sectors comprise the Republic of Korea's national critical infrastructure [62]:
- Energy
- Telecommunications
- Transportation
- Financials services
- Healthcare and medical services
- Nuclear energy
- Environment
- Government critical facilities
- Water Supply
Republic of Trinidad & Tobago
The national cyber security strategy recognizes the following critical (information) infrastructure sectors [63]:
- Banking and financial services
- Communications infrastructure
- Public health
- Public safety
- Public transportation
- Key infrastructure
Sierra Leone
The Critical National Information Infrastructure encompasses The Cyber Security and Crime Act 2021
- the security, defence or international relations of Siena Leone
- criminal law enforcement
- communications infrastructure
- banking and financial services
- public utilities
- public transportation
- public-key infrastructure
- public safety and essential emergency services.
Singapore
Singapore recognises the following eight CI sectors: [64]
- Energy
- Banking and Finance
- Healthcare
- Transport (which includes Land, Maritime, and Aviation)
- Government
- Information and communication
- Media
- Security & Emergency Services
Slovakia
Sektorom kritickej infraštruktúry časť kritickej infraštruktúry, do ktorej sa zaraďujú prvky; sektor môže obsahovať jeden alebo viac podsektorov kritickej infraštruktúry (ďalej len „podsektor“). [65]
Slovakia recognises nine critical sectors: [66]
- Energy (Energetika)
- Transport (Doprava)
- Food (Potraviny)
- Drinking water (Voda)
- Health (Zdravie)
- Financial sector (Finančný sector)
- Information and communication (Informačné a komunikačné technológie)
- Public Order and Internal Security (Verejný poriadok a vnútorná bezpečnosť)
- Industry (Priemysel)
Slovenia
Sectors Critical Infrastructure of the Republic of Slovenia [67]:
- Energy (more than 7 days to rehabilitate; power disruption for more than 100.000 people; interruption petroleum and gas products for more than a week affecting over 100.000 people and costs in the amount of 10 M Euro/day)
- Transportation (disable rail traffic on key routes for more than a couple of weeks and damages of 10 M Euro/day)
- Food (unable to provide basic food products for a week for over 100.000 people)
- Drinking water (unable to provide drinking water for a week for over 100.000 people)
- Health / Medical care (unable to provide emergency care and public health services for over 100.000 people)
- Finance (unable to provide money supply for more than 3 days in an area of more than 50,000 people)
- Environmental protection (pollution with a short-term harmful effect on the population in an area of over 50,000 people)
- Communications and Information Technologies
Spain
Spain's national infrastructure is currently categorised by twelve critical sectors[68]:
- Administration
- Chemical Industry
- Energy
- Financial and Tax System
- Food Supply Chain
- Health
- Information and Communication Technologies (ICT)
- Nuclear Industry
- Research Laboratories
- Space
- Transport
- Water
Sweden
Swedens' national infrastructure is currently categorised by eleven critical sectors providing a set of critical societal functions [69]:
- Energy Supply
- Information and Communication Technologies (ICT)
- Financial Services
- Social Insurances
- Public Health, medical services and special social services
- Protection, Security and Safety
- Transport
- Municipal Services
- Food
- Trade and Industry
- Public Administration (governance, support functions, service sector)
Switzerland
Switzerlands' national infrastructure is currently categorised by ten critical sectors and 28 subsectors which are subcategorised very high critical, high critical and regular critical [70]:
- Energy: natural gas supply, oil supply, and power supply
- Financial services: banks, and insurance companies
- Information- & communication technologies (ICT): information technology, media, and telecommunication
- Industry: chemical and pharmaceutical industry, and mechanical and electrical engineering industries
- Public administration: foreign representations and headquarters of international organisations; national cultural property; parliament, government, justice, administration; research institutes
- Public health: medical care and hospitals; laboratories
- Public safety: armed forces, civil defense, emergency organizations (police, fire service, emergency medical service and rescue services)
- Transport: air transport, water transport, postal services, rail transport, road transport
- Water and food: food supply, drinking water supply
- Waste disposal: waste, wastewater
Türkiye
Türkiye's national infrastructure is currently categorised by six critical sectors [71] [72]:
- Electronic Communication (Elektronik Haberleşme)
- Energy (Enerji)
- Water management (Su Yönetimi)
- Critical Public Services (Kritik Kamu Hizmetleri)
- Transport (Ulaştırma)
- Banking and Finance (Bankacılık ve Finans)
which contain critical infrastructures pursuant to Resolution No.2 of the Cyber Security Board dated 20/06/2013.
United Arab Emirates
The United Arab Emirates' national infrastructure is currently categorised by nine critical sectors [73] [74]:
- Energy (الطاقة)
- ICT (المعلومات الاتصالات وتقنية)
- Government (القطاع الحكومي)
- Electricy & Water (الكهرباء والمياه)
- Finance & Insurance (القطاع المالي والتأمين)
- Emergency Services (خدمات الطوارئ)
- Health Services (الخدمات الصحية)
- Transportation (المواصلات)
- Food & Agriculture (الغذاء والزراعة)
United Kingdom (UK)
UK's national infrastructure was categorised into nine sectors but has been extended to 13 sectors [75]:
- communications (telecommunications, postal services, broadcast)
- emergency services (ambulance, fire & rescue, marine, police)
- energy (electricity, gas, fuel)
- financial services (payment, clearing & settlement systems, market & exchange, public finances)
- food (production, processing, import, distribution, retail)
- government (central government, devolved administration/functions, regional and local government, parliament)
- health (health & social care)
- transport (aviation, maritime, land) and water (potable water supply, wastewater services, dams)
- defence
- coast guard
- chemicals
- civil nuclear
- space
United States
The 2009 NIPP [76] defines a sector as
Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience[77] identifies 16 critical infrastructure sectors:
- Chemical Sector
- Commercial Facilities Sector
- Communications Sector
- Critical Manufacturing Sector
- Dams Sector [78]
- Defense Industrial Base Sector
- Emergency Services Sector
- Energy Sector
- Financial Services Sector
- Food and Agriculture Sector
- Government Facilities Sector
- Healthcare and Public Health Sector
- Information Technology Sector
- Nuclear Reactors, Materials, and Waste Sector
- Transportation Systems Sector
- Water and Wastewater Systems Sector
Each sector falls under the responsibility of a designated Sector-Specific Agency (SSA).
NIST
Critical Infrastructure Sectors[79]:
- Information technology
- Telecommunications
- Chemical
- Transportation systems, including mass transit, aviation, maritime, ground/surface, and rail and pipeline systems
- Emergency services, and
- Postal and shipping.
Vietnam
The 11 key areas (11 lĩnh vực) include [80]: (* 12 key areas are listed)
- transport,
- energy,
- natural resources and environment,
- information,
- health,
- finance,
- banking,
- defence,
- security,
- social order and safety,
- urban areas, and
- the Government's direction and administration.
Virgin Islands
The Virgin Islands defined [81] their CI as:
- road network,
- schools,
- community and emergency centres,
- police and fire stations,
- health facilities,
- public administration buildings,
- the financial centre,
- airports and major hotels;
- facilities and distribution systems for critical utilities including electricity, telecommunications and water as well as the sewerage system.
In addition to existing critical infrastructure, developable lands suited and air-marked for critical infrastructure must be considered.
Other Definitions
Scotland
The Scotland Act 1998 identifies those areas which are reserved and devolved. The Scottish Government fulfils the role of the Sector sponsor department (SSDI in Scotland for those sectors or sub-sectors [82]:
- Defense Industrial Base Sector
- Emergency Services (with the exception of MCA Security, British Transport Police and the Security Service)
- Food
- Devolved Scottish Government Services
- Health
- Water
- Road Transport
See also
Notes
References
- ↑ 80200-1/2012/5 (2012)
- ↑ E. Brunner, M. Suter, International CIIP Handbook 2008/2009: An Inventory of 25 National and 7 International Critical Information Infrastructure Protection Policies, A. Wenger, V. Mauer, M. Dunn (Eds.), CRN Handbooks, Vol. 4, no. 1, Center for Security Studies (CSS), Zurich, Switzerland, September 2008.
- ↑ 3.0 3.1 3.2 3.3 3.4 Directive (EU) 2019/944
- ↑ 4.0 4.1 Regulation (EU) 2019/943
- ↑ 5.0 5.1 5.2 5.3 5.4 Directive 2009/73/EC
- ↑ Directive 2009/119/EC
- ↑ 7.0 7.1 7.2 7.3 7.4 7.5 Directive (EU) 2022/2555
- ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
- ↑ Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the resilience of critical entities COM/2020/829 final
- ↑ 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.
- ↑ Security of Critical Infrastructure Act 2018
- ↑ The 2023 Critical Infrastructure Resilience Strategy (2023)
- ↑ Security Legislation Amendment (Critical Infrastructure) Act 2021
- ↑ Critical Infrastructure Resilience Strategy
- ↑ APCIP
- ↑ Azerbaijan decreet 2021-ci il 17 aprel tarixli 1315
- ↑ القطاعات الحيوية في مملكة البحرين
- ↑ Bahrein CNI definition
- ↑ Commonwealth Telecommunication Organisation, Critical Information Infrastructure Protection (CIIP) workshops 2014
- ↑ Service Public Fédéral Intérieur/Federale Overheidsdienst Binnenlandse Zaken F./N. 2011-1799; C-2011/00399 (2011)
- ↑ GUIA DE REFERÊNCIA PARA A SEGURANÇA DAS INFRAESTRUTURAS CRÍTICAS DA INFORMAÇÃO
- ↑ Public Safety Canada - Critical Infrastructure
- ↑ Chile Política Nacional de Ciberseguridad (2017)
- ↑ Chilean National Cybersecurity Policy (2017)
- ↑ Stratégie nationale de cybersécurité 2022 - 2025 de la République Démocratique de Congo}}
- ↑ Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)
- ↑ Crisis management act
- ↑ National Risk Profile, DEMA, 2013.
- ↑ Nationalt Risikobillede (NRB), Beredskabsstyrelsen, 2013.
- ↑ Glosario de Riesgo, Ministerio de Medio Ambiente y Recursos Naturales, El Salvador
- ↑ Cyber Security Strategy, Min. of Defence, Tallinn (2008)
- ↑ Security Strategy for Society, Government Resolution 16.12.2010
- ↑ Yhteikunnan Turvallisuusstrategia, Valtioneuvoston periaatepäätös 16.12.2010
- ↑ INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J
- ↑ Arrêté du 3 juillet 2008 portant modification de l’arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0156 du 5 juillet 2008, NOR : PRMD0813724A.
- ↑ Arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0129 du 4 juin 2006, NOR : PRMX0609332A
- ↑ Unpublished working glossary of UP KRITIS and BSI, 2014
- ↑ Republic of Ghana - National Cyber Security Policy & Strategy (2015)
- ↑ G.S.R 19 (E) dated 16.01.2014-Information Technology (National Critical Information Infrastructure Protection Centre and manner of performing function and duties) Rules, 2013
- ↑ Guidelines for the Protection of Critical Information Infrastructure, Version 1.0, June 2013. New Delhi: NCIIPC, p. 1.
- ↑ workshop presentation by the NATIONAL CRITICAL INFORMATION INFRASTRUCTURE PROTECTION CENTRE (NCIIPC), 2015
- ↑ Melindungi Infrastruktur Kritis Nasional dari Serangan Cyber: Perspektif Kebijakan Ketahanan Nasional
- ↑ 重要インフラの情報セキュリティ対策に係る 第4次行動計画 (2018)
- ↑ The Cybersecurity Policy for Critical Infrastructure Protection (4th Edition) (Tentative Translation) (2018)
- ↑ Cyber Security Strategy (2013)
- ↑ Jersey's Digital Policy Framework (2016)
- ↑ الاستراتيجية الوطنية للأمن السيبراني لدولة الكويت (2017-2020)
- ↑ National Cyber Security Strategy 2017-2020
- ↑ Malaysia (2009)
- ↑ HOTĂRÂRE Nr. 701 din 11-07-2018 pentru aprobarea Regulamentului privind protecția antiteroristă a infrastructurii critice
- ↑ Strategija sajber bezbjednosti Crne Gore 2022-2026 (2021)
- ↑ Voortgangsbrief Nationale Veiligheid 2016
- ↑ Factsheet Resilient critical infrastructure, NCTV, Netherlands
- ↑ Bescherming Vitale infrastructuur (2010)
- ↑ Handreiking Cybercrime (2012)
- ↑ Norwegian Official Report: Når sikkerhet er viktigst - Beskyttelse av landets kritiske infrastrukturer og kritiske samfunnsfunksjoner. Department of Justice and Public Security . NOU 2006:6
- ↑ National Cyber Security Policy 2021
- ↑ Papua New Guinea Criminal code act 2016
- ↑ INFRASTRUKTURA KRYTYCZNA webpage
- ↑ QATAR National Cyber Security Strategy (May 2014)
- ↑ الاستراتيجية الوطنية للأمن السيبراني QATAR National Cyber Security Strategy - Arabic version (May 2014)
- ↑ Act on the Protection of Information and Communications Infrastructure. Korea Act No.11690, 2013.
- ↑ Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)
- ↑ (draft) Cybersecurity Bill 2017
- ↑ Act no. 45/ 2011 Col. On Critical Infrastructure
- ↑ Národný program pre ochranu a obranu kritickej infraštruktúry v Slovenskej republike
- ↑ Osnovni in sektorski kriteriji kritičnosti za določanje kritične infrastructure državnega pomena v Republiki Sloveniji (2012)
- ↑ CNPIC
- ↑ Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure, Swedish Civil Contingencies Agency (MSB) (2014).
- ↑ The Swiss Programme on Critical Infrastructure Protection - factsheet
- ↑ Decree No. 2 on the Regulation Amending the Regulation on Military Forbidden Zones and Security Zones, 20-6-2013
- ↑ 2016-2019 ULUSAL SİBER GÜVENLİK STRATEJİSİ
- ↑ الاستراتيجية الوطنية للأمن السيبراني
- ↑ Cyber Security Strategy 2019
- ↑ CNI at Centre for the Protection of National Infrastructure (CPNI)
- ↑ National Infrastructure Protection Plan, Partnering to enhance protection and resiliency, US Department of Homeland Security, 2009
- ↑ Presidential Policy Directive -- Critical Infrastructure Security and Resilience, PPD-21, 2013
- ↑ Note: The Dams Sector comprises dam projects, navigation locks, levees, hurricane barriers, mine tailings impoundments, and other similar water retention and/or control facilities. Dams are vital to the nation's infrastructure and provide a wide range of economic, environmental, and social benefits, including hydroelectric power, river navigation, water supply, flood control, and recreation.
- ↑ NIST Glossary - CNSSI 4009-2015 (NIST SP 800-30 Rev. 1) and NIST SP 800-30 (HSPD-7)
- ↑ news item on new Vietnam's cybersecurity strategy
- ↑ The Virgin Islands Climate Change Green Paper Prepared by the Conservation and Fisheries Department, Ministry of Natural Resources and Labour (2010)
- ↑ Secure and Resilient: A Strategic Framework for Critical National Infrastructure, 2011 in Scotland