Difference between revisions of "Critical Information Infrastructure Sector"

From CIPedia
Jump to navigation Jump to search
(Created page with "==Definitions== ===European Definitions=== ====Council Directive 2022/2557 (CER Directive)==== {| class="wikitable" |- !Sectors||Subsectors||Categories of entities |- |...")
 
(→‎Chile)
 
(11 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
==Definitions==
 
==Definitions==
 
===European Definitions===
 
===European Definitions===
−
====[[EU|Council Directive 2022/2557 (CER Directive)]]====
+
====[[EU]]====
−
{| class="wikitable"
+
See: Council Directive 2022/2557 (CER Directive) and the NIS2 Directive
−
|-
 
−
!Sectors||Subsectors||Categories of entities
 
−
|-
 
−
| rowspan="16" |1. Energy|| rowspan="6" |(a) Electricity||Electricity undertakings as defined in Article 2, point (57), of <ref name="EU2019944">[http://data.europa.eu/eli/dir/2019/944/oj Directive (EU) 2019/944]</ref>of the European Parliament and of the Council, which carry out the function of ‘supply’ as defined in Article 2, point (12), of that Directive
 
−
|-
 
−
|Distribution system operators as defined in Article 2, point (29), of <ref name="EU2019944">[http://data.europa.eu/eli/dir/2019/944/oj Directive (EU) 2019/944]</ref>
 
−
|-
 
−
|Transmission system operators as defined in Article 2, point (35), of <ref name="EU2019944">[http://data.europa.eu/eli/dir/2019/944/oj Directive (EU) 2019/944]</ref>
 
−
|-
 
−
|Producers as defined in Article 2, point (38), of <ref name="EU2019944">[http://data.europa.eu/eli/dir/2019/944/oj Directive (EU) 2019/944]</ref>
 
−
|-
 
−
|Nominated electricity market operators as defined in Article 2, point (8), of <ref name="EU2019943">[http://data.europa.eu/eli/dir/2019/943/oj Regulation (EU) 2019/943]</ref> of the European Parliament and of the Council
 
−
|-
 
−
|Market participants as defined in Article 2, point (25), of <ref name="EU2019943">[http://data.europa.eu/eli/dir/2019/943/oj Regulation (EU) 2019/943]</ref> providing aggregation, demand response or energy storage services as defined in Article 2, points (18), (20) and (59), of <ref name="EU2019944">[http://data.europa.eu/eli/dir/2019/944/oj Directive (EU) 2019/944]</ref>
 
−
|-
 
−
|(b) District heating and cooling||Operators of district heating or district cooling as defined in Article 2, point (19), of Directive (EU) 2018/2001 of the European Parliament and of the Council
 
−
|-
 
−
| rowspan="3" |(c) Oil||Supply undertakings as defined in Article 2, point (8), of <ref name="EU200973">[http://data.europa.eu/eli/dir/2009/73/oj Directive 2009/73/EC]</ref> of the European Parliament and of the Council
 
−
|-
 
−
|Operators of oil production, refining and treatment facilities, storage and transmission
 
−
|-
 
−
|Central stockholding entities as defined in Article 2, point (f), of Council of <ref name="EU2009119">[http://data.europa.eu/eli/dir/2009/119/oj Directive 2009/119/EC]</ref>
 
−
|-
 
−
| rowspan="5" |(d) Gas||Supply undertakings as defined in Article 2, point (8), of <ref name="EU200973">[http://data.europa.eu/eli/dir/2009/73/oj Directive 2009/73/EC]</ref> of the European Parliament and of the Council
 
−
|-
 
−
|Distribution system operators as defined in Article 2, point (6), of <ref name="EU200973">[http://data.europa.eu/eli/dir/2009/73/oj Directive 2009/73/EC]</ref>
 
−
|-
 
−
|Transmission system operators as defined in Article 2, point (4), of <ref name="EU200973">[http://data.europa.eu/eli/dir/2009/73/oj Directive 2009/73/EC]</ref>
 
−
|-
 
−
|Storage system operators as defined in Article 2, point (10), of <ref name="EU200973">[http://data.europa.eu/eli/dir/2009/73/oj Directive 2009/73/EC]</ref>
 
−
|-
 
−
|Operators of natural gas refining and treatment facilities
 
−
 
 
−
|-
 
−
|(e) Hydrogen||Operators of hydrogen production, storage and transmission
 
−
 
 
−
|-
 
−
| rowspan="11" |2. Transport|| rowspan="3" |(a) Air||Air carriers as defined in Article 3, point (4), of Regulation (EC) No 300/2008 used for commercial purposes
 
−
|-
 
−
|Airport managing bodies as defined in Article 2, point (2), of Directive 2009/12/EC of the European Parliament and of the Council (6), airports as defined in Article 2, point (1), of that Directive, including the core airports listed in Section 2 of Annex II to Regulation (EU) No 1315/2013 of the European Parliament and of the Council (7), and entities operating ancillary installations contained within airports
 
−
|-
 
−
|Traffic management control operators providing air traffic control (ATC) services as defined in Article 2, point (1), of Regulation (EC) No 549/2004 of the European Parliament and of the Council
 
−
|-
 
−
| rowspan="2" |(b) Rail||Infrastructure managers as defined in Article 3, point (2), of Directive 2012/34/EU of the European Parliament and of the Council
 
−
|-
 
−
|Railway undertakings as defined in Article 3, point (1), of Directive 2012/34/EU and operators of service facilities as defined in Article 3, point (12), of that Directive
 
−
|-
 
−
| rowspan="3" |(c) Water||Inland, sea and coastal passenger and freight water transport companies, as defined for maritime transport in Annex I to Regulation (EC) No 725/2004, not including the individual vessels operated by those companies
 
−
|-
 
−
|Managing bodies of ports as defined in Article 3, point (1), of Directive 2005/65/EC, including their port facilities as defined in Article 2, point (11), of Regulation (EC) No 725/2004, and entities operating works and equipment contained within ports
 
−
|-
 
−
|Operators of vessel traffic services (VTS) as defined in Article 3, point (o), of Directive 2002/59/EC of the European Parliament and of the Council (10)
 
−
|-
 
−
| rowspan="2" |(d) Road||Road authorities as defined in Article 2, point (12), of Commission Delegated Regulation (EU) 2015/962 (11) responsible for traffic management control, excluding public entities for whom traffic-management or the operation of intelligent transport systems is a non-essential part of their general activity
 
−
|-
 
−
|Operators of Intelligent Transport Systems as defined in Article 4, point (1), of Directive 2010/40/EU of the European Parliament and of the Council
 
−
|-
 
−
|(e) Public Transport||Public service operators as defined in Article 2, point (d), of Regulation (EC) No 1370/2007 of the European Parliament and of the Council
 
−
|-
 
−
|3. Banking|| ||Credit institutions as defined in Article 4, point (1), of Regulation (EU) No 575/2013
 
−
|-
 
−
| rowspan="2" |4. Financial market infrastructure|| rowspan="2" | ||Operators of trading venues as defined in Article 4, point (24), of Directive 2014/65/EU
 
−
|-
 
−
|Central counterparties (CCPs) as defined in Article 2, point (1), of Regulation (EU) No 648/2012
 
−
|-
 
−
| rowspan="6" |5. Health|| rowspan="6" | ||Healthcare providers as defined in Article 3, point (g), of Directive 2011/24/EU of the European Parliament and of the Council
 
−
|-
 
−
|EU reference laboratories as referred to in Article 15 of Regulation (EU) 2022/2371 of the European Parliament and of the Council
 
−
|-
 
−
|Entities carrying out research and development activities of medicinal products as defined in Article 1, point (2), of Directive 2001/83/EC of the European Parliament and of the Council
 
−
|-
 
−
|Entities manufacturing basic pharmaceutical products and pharmaceutical preparations as referred to in Section C division 21 of NACE Rev. 2
 
−
|-
 
−
|Entities manufacturing medical devices considered as critical during a public health emergency (‘public health emergency critical devices list’) within the meaning of Article 22 of Regulation (EU) 2022/123 of the European Parliament and of the Council
 
−
|-
 
−
|Entities holding a distribution authorisation as referred to in Article 79 of Directive 2001/83/EC
 
−
|-
 
−
|6. Drinking Water|| ||Suppliers and distributors of water intended for human consumption as defined in Article 2, point (1)(a), of Directive (EU) 2020/2184 of the European Parliament and of the Council (18), excluding distributors for which distribution of water for human consumption is a non-essential part of their general activity of distributing other commodities and goods
 
−
|-
 
−
|7. Waste Water|| ||Undertakings collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water as defined in Article 2, points (1), (2) and (3), of Council Directive 91/271/EEC (19), excluding undertakings for which collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water is a non-essential part of their general activity
 
−
|-
 
−
| rowspan="9" |8. Digital infrastructure|| rowspan="9" | ||Providers of internet exchange points as defined in Article 6, point (18), of <ref name="EU20222055">[http://data.europa.eu/eli/dir/2022/2055/oj Directive (EU) 2022/2555]</ref>
 
−
|-
 
−
|DNS service providers as defined in Article 6, point (20), of <ref name="EU20222055">[http://data.europa.eu/eli/dir/2022/2055/oj Directive (EU) 2022/2555]</ref>, excluding operators of root name servers
 
−
|-
 
−
|top-level-domain name registries as defined in Article 6, point (21), of <ref name="EU20222055">[http://data.europa.eu/eli/dir/2022/2055/oj Directive (EU) 2022/2555]</ref>
 
−
|-
 
−
|Providers of cloud computing services as defined in Article 6, point (30), of <ref name="EU20222055">[http://data.europa.eu/eli/dir/2022/2055/oj Directive (EU) 2022/2555]</ref>
 
−
|-
 
−
|Providers of data centre services as defined in Article 6, point (31), of <ref name="EU20222055">[http://data.europa.eu/eli/dir/2022/2055/oj Directive (EU) 2022/2555]</ref>
 
−
|-
 
−
|Providers of content delivery networks as defined in Article 6, point (32), of <ref name="EU20222055">[http://data.europa.eu/eli/dir/2022/2055/oj Directive (EU) 2022/2555]</ref>
 
−
|-
 
−
|Trust service providers as defined in Article 3, point (19), of Regulation (EU) No 910/2014 of the European Parliament and of the Council
 
−
|-
 
−
|Providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972 of the European Parliament and of the Council (21)
 
−
|-
 
−
|Providers of electronic communications services as defined in Article 2, point (4), of Directive (EU) 2018/1972 insofar as their services are publicly available
 
−
|-
 
−
|9. Public administration|| ||Public administration entities of central governments as defined by Member States in accordance with national law
 
−
|-
 
−
|10. Space|| ||Operators of ground-based infrastructure, owned, managed and operated by Member States or by private parties, that support the provision of space-based services, excluding providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972
 
−
|-
 
−
|11. Production, processing and distribution of food|| ||Food businesses as defined in Article 3, point (2), of Regulation (EC) No 178/2002 of the European Parliament and of the Council (22) which are engaged exclusively in logistics and wholesale distribution and large scale industrial production and processing
 
−
 
 
−
|}
 
−
 
 
 
<br />
 
<br />
 
<!---
 
<!---
 
===Other International Definitions===
 
===Other International Definitions===
 
--->
 
--->
 +
 
===National Definitions===
 
===National Definitions===
  
Line 130: Line 24:
 
#defense(defence)
 
#defense(defence)
 
<br />
 
<br />
 +
====[[Costa Rica]]====
 +
{{definition|Operador de Infraestructuras Críticas de Información: Son todas las organizaciones o entidades que operen sistemas físicos o virtuales, que ofrecen servicios esenciales para dar apoyo a los sistemas básicos a nivel social, educativo, económico, medioambiental y político. <ref>[https://micitt.go.cr/sites/default/files/2023-11/NCS%20Costa%20Rica%20-%2010Nov2023%20SPA.pdf Estrategia Nacional de Ciberseguridad de Costa Rica (2023-2027) ]</ref>}}<br/>
  
−
 
+
==== [[Ghana]] ====
−
 
+
Ghana's national critical information infrastructure is categorised by the following critical sectors:  <ref>[https://www.csa.gov.gh/resources/Directive_CII.pdf Directive for the Protection of Critical Information Infrastructure (CII) (2020)]</ref>
−
 
+
#National Security and Intelligence
 +
#Information and Communication Technology
 +
#Banking and Finance
 +
#Energy
 +
#Water
 +
#Transport
 +
#Health
 +
#Emergency Services
 +
#Government
 +
#Food and Agriculture
 +
#Manufacturing
 +
#Mining
 +
#Education
 +
<br /><br/>
 
====[[Qatar]]====
 
====[[Qatar]]====
 
The critical sectors which comprise Qatar's [[National Critical Infrastructure|national critical infrastructure]] include but are not restricted to <ref>[http://www.ictqatar.qa/en/cyber-security/national-cyber-security-strategy QATAR National Cyber Security Strategy (May 2014)]</ref> <ref>[http://www.ictqatar.qa/ar/cyber-security/national-cyber-security-strategy الاستراتيجية الوطنية للأمن السيبراني QATAR National Cyber Security Strategy - Arabic version (May 2014)]</ref> :
 
The critical sectors which comprise Qatar's [[National Critical Infrastructure|national critical infrastructure]] include but are not restricted to <ref>[http://www.ictqatar.qa/en/cyber-security/national-cyber-security-strategy QATAR National Cyber Security Strategy (May 2014)]</ref> <ref>[http://www.ictqatar.qa/ar/cyber-security/national-cyber-security-strategy الاستراتيجية الوطنية للأمن السيبراني QATAR National Cyber Security Strategy - Arabic version (May 2014)]</ref> :
Line 143: Line 52:
 
#Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
 
#Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
 
#Transportation (قطاع النقل والمواصلات)
 
#Transportation (قطاع النقل والمواصلات)
−
 
 
<br />
 
<br />
−
 
  
 
====[[Republic of Trinidad & Tobago]]====
 
====[[Republic of Trinidad & Tobago]]====
Line 167: Line 74:
 
# public transportation
 
# public transportation
 
# public-key infrastructure
 
# public-key infrastructure
−
# public safety and essential emergency services. <br/>
+
# public safety and essential emergency services. <br/><br/>
  
 +
==== [[United Arab Emirates]] ====
 +
The United Arab Emirates' national information infrastructure is currently categorised by nine critical sectors <ref>[https://www.tra.gov.ae/userfiles/assets/IJP6zPkDr3.pdf الاستراتيجية الوطنية للأمن السيبراني]</ref> <ref>[https://www.tra.gov.ae/userfiles/assets/Lw3seRUaIMd.pdf Cyber Security Strategy 2019]</ref>:
 +
# Energy (الطاقة)
 +
# ICT (المعلومات الاتصالات وتقنية)
 +
# Government (القطاع الحكومي)
 +
# Electricy &amp; Water (الكهرباء والمياه)
 +
# Finance &amp; Insurance (القطاع المالي والتأمين)
 +
# Emergency Services (خدمات الطوارئ)
 +
# Health Services (الخدمات الصحية)
 +
# Transportation (المواصلات)
 +
# Food &amp; Agriculture (الغذاء والزراعة)
 +
<br/>
  
 
====[[Vietnam]]====
 
====[[Vietnam]]====
Line 203: Line 122:
 
==See also==
 
==See also==
  
−
*[[Sector-Specific Agency (SSA)]]
+
[[Critical Infrastructure Sector]]
 +
[[Critical Information Infrastructure]]
  
 
==Notes==
 
==Notes==
Line 212: Line 132:
 
[[Category:Sector]]
 
[[Category:Sector]]
 
[[Category:Policy]]
 
[[Category:Policy]]
−
{{#set:defined by=EU|defined by=Chile|defined by=Qatar|defined by=Republic of Trinidad & Tobago|defined by=Sierra Leone|defined by=Vietnam}}
+
{{#set:defined by=EU|defined by=Chile|defined by=Costa Rica|defined by=Ghana|defined by=Qatar|defined by=Republic of Trinidad & Tobago|defined by=Sierra Leone|defined by=United Arab Emirates|defined by=Vietnam}}
 
{{#set: Showmainpage=Yes}}
 
{{#set: Showmainpage=Yes}}

Latest revision as of 00:58, 15 November 2023

Definitions

European Definitions

EU

See: Council Directive 2022/2557 (CER Directive) and the NIS2 Directive

National Definitions

Chile

Chile's national critical information infrastructure is categorised by the following critical sectors: [1] [2]}}

  1. energía (energy)
  2. telecomunicaciones (telecommunications)
  3. agua (water)
  4. salud (health)
  5. servicios financieros (financial services)
  6. seguridad pública (public safety)
  7. transporte (transport)
  8. administración pública (civil service)
  9. protección civil (civil protection)
  10. defense(defence)


Costa Rica

Operador de Infraestructuras Críticas de Información: Son todas las organizaciones o entidades que operen sistemas físicos o virtuales, que ofrecen servicios esenciales para dar apoyo a los sistemas básicos a nivel social, educativo, económico, medioambiental y político. [3]


Ghana

Ghana's national critical information infrastructure is categorised by the following critical sectors: [4]

  1. National Security and Intelligence
  2. Information and Communication Technology
  3. Banking and Finance
  4. Energy
  5. Water
  6. Transport
  7. Health
  8. Emergency Services
  9. Government
  10. Food and Agriculture
  11. Manufacturing
  12. Mining
  13. Education



Qatar

The critical sectors which comprise Qatar's national critical infrastructure include but are not restricted to [5] [6] :

  1. Energy, Electricity, and Water (قطاع الطاقة والكهرباء والماء)
  2. Finance (القطاع الما ي ل)
  3. Government (القطاع الحكومي)
  4. Healthcare (قطاع الرعاية الصحية)
  5. Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
  6. Transportation (قطاع النقل والمواصلات)


Republic of Trinidad & Tobago

The national cyber security strategy recognizes the following critical information infrastructure sectors [7]:

  1. Banking and financial services
  2. Communications infrastructure
  3. Public health
  4. Public safety
  5. Public transportation
  6. Key infrastructure


Sierra Leone

The Critical National Information Infrastructure encompasses The Cyber Security and Crime Act 2021

  1. the security, defence or international relations of Siena Leone
  2. criminal law enforcement
  3. communications infrastructure
  4. banking and financial services
  5. public utilities
  6. public transportation
  7. public-key infrastructure
  8. public safety and essential emergency services.

United Arab Emirates

The United Arab Emirates' national information infrastructure is currently categorised by nine critical sectors [8] [9]:

  1. Energy (الطاقة)
  2. ICT (المعلومات الاتصالات وتقنية)
  3. Government (القطاع الحكومي)
  4. Electricy & Water (الكهرباء والمياه)
  5. Finance & Insurance (القطاع المالي والتأمين)
  6. Emergency Services (خدمات الطوارئ)
  7. Health Services (الخدمات الصحية)
  8. Transportation (المواصلات)
  9. Food & Agriculture (الغذاء والزراعة)


Vietnam

The 11 key cyber security protection areas (11 lĩnh vực) include [10]: (* 12 key areas are listed)

  1. transport,
  2. energy,
  3. natural resources and environment,
  4. information,
  5. health,
  6. finance,
  7. banking,
  8. defence,
  9. security,
  10. social order and safety,
  11. urban areas, and
  12. the Government's direction and administration.


See also

Critical Infrastructure Sector Critical Information Infrastructure

Notes

References

  1. ↑ Chile Política Nacional de Ciberseguridad (2017)
  2. ↑ Chilean National Cybersecurity Policy (2017)
  3. ↑ Estrategia Nacional de Ciberseguridad de Costa Rica (2023-2027)
  4. ↑ Directive for the Protection of Critical Information Infrastructure (CII) (2020)
  5. ↑ QATAR National Cyber Security Strategy (May 2014)
  6. ↑ الاستراتيجية الوطنية للأمن السيبراني QATAR National Cyber Security Strategy - Arabic version (May 2014)
  7. ↑ Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)
  8. ↑ الاستراتيجية الوطنية للأمن السيبراني
  9. ↑ Cyber Security Strategy 2019
  10. ↑ news item on new Vietnam's cybersecurity strategy


Retrieved from "https://websites.fraunhofer.de/CIPedia/index.php?title=Critical_Information_Infrastructure_Sector&oldid=13561"