Critical Information Infrastructure Sector

Definitions

European Definitions

Council Directive 2022/2557 (CER Directive)

Sectors	Subsectors	Categories of entities
1. Energy	(a) Electricity	Electricity undertakings as defined in Article 2, point (57), of of the European Parliament and of the Council, which carry out the function of ‘supply’ as defined in Article 2, point (12), of that Directive
		Distribution system operators as defined in Article 2, point (29), of
		Transmission system operators as defined in Article 2, point (35), of
		Producers as defined in Article 2, point (38), of
		Nominated electricity market operators as defined in Article 2, point (8), of of the European Parliament and of the Council
		Market participants as defined in Article 2, point (25), of providing aggregation, demand response or energy storage services as defined in Article 2, points (18), (20) and (59), of
	(b) District heating and cooling	Operators of district heating or district cooling as defined in Article 2, point (19), of Directive (EU) 2018/2001 of the European Parliament and of the Council
	(c) Oil	Supply undertakings as defined in Article 2, point (8), of of the European Parliament and of the Council
		Operators of oil production, refining and treatment facilities, storage and transmission
		Central stockholding entities as defined in Article 2, point (f), of Council of
	(d) Gas	Supply undertakings as defined in Article 2, point (8), of of the European Parliament and of the Council
		Distribution system operators as defined in Article 2, point (6), of
		Transmission system operators as defined in Article 2, point (4), of
		Storage system operators as defined in Article 2, point (10), of
		Operators of natural gas refining and treatment facilities
	(e) Hydrogen	Operators of hydrogen production, storage and transmission
2. Transport	(a) Air	Air carriers as defined in Article 3, point (4), of Regulation (EC) No 300/2008 used for commercial purposes
		Airport managing bodies as defined in Article 2, point (2), of Directive 2009/12/EC of the European Parliament and of the Council (6), airports as defined in Article 2, point (1), of that Directive, including the core airports listed in Section 2 of Annex II to Regulation (EU) No 1315/2013 of the European Parliament and of the Council (7), and entities operating ancillary installations contained within airports
		Traffic management control operators providing air traffic control (ATC) services as defined in Article 2, point (1), of Regulation (EC) No 549/2004 of the European Parliament and of the Council
	(b) Rail	Infrastructure managers as defined in Article 3, point (2), of Directive 2012/34/EU of the European Parliament and of the Council
		Railway undertakings as defined in Article 3, point (1), of Directive 2012/34/EU and operators of service facilities as defined in Article 3, point (12), of that Directive
	(c) Water	Inland, sea and coastal passenger and freight water transport companies, as defined for maritime transport in Annex I to Regulation (EC) No 725/2004, not including the individual vessels operated by those companies
		Managing bodies of ports as defined in Article 3, point (1), of Directive 2005/65/EC, including their port facilities as defined in Article 2, point (11), of Regulation (EC) No 725/2004, and entities operating works and equipment contained within ports
		Operators of vessel traffic services (VTS) as defined in Article 3, point (o), of Directive 2002/59/EC of the European Parliament and of the Council (10)
	(d) Road	Road authorities as defined in Article 2, point (12), of Commission Delegated Regulation (EU) 2015/962 (11) responsible for traffic management control, excluding public entities for whom traffic-management or the operation of intelligent transport systems is a non-essential part of their general activity
		Operators of Intelligent Transport Systems as defined in Article 4, point (1), of Directive 2010/40/EU of the European Parliament and of the Council
	(e) Public Transport	Public service operators as defined in Article 2, point (d), of Regulation (EC) No 1370/2007 of the European Parliament and of the Council
3. Banking		Credit institutions as defined in Article 4, point (1), of Regulation (EU) No 575/2013
4. Financial market infrastructure		Operators of trading venues as defined in Article 4, point (24), of Directive 2014/65/EU
		Central counterparties (CCPs) as defined in Article 2, point (1), of Regulation (EU) No 648/2012
5. Health		Healthcare providers as defined in Article 3, point (g), of Directive 2011/24/EU of the European Parliament and of the Council
		EU reference laboratories as referred to in Article 15 of Regulation (EU) 2022/2371 of the European Parliament and of the Council
		Entities carrying out research and development activities of medicinal products as defined in Article 1, point (2), of Directive 2001/83/EC of the European Parliament and of the Council
		Entities manufacturing basic pharmaceutical products and pharmaceutical preparations as referred to in Section C division 21 of NACE Rev. 2
		Entities manufacturing medical devices considered as critical during a public health emergency (‘public health emergency critical devices list’) within the meaning of Article 22 of Regulation (EU) 2022/123 of the European Parliament and of the Council
		Entities holding a distribution authorisation as referred to in Article 79 of Directive 2001/83/EC
6. Drinking Water		Suppliers and distributors of water intended for human consumption as defined in Article 2, point (1)(a), of Directive (EU) 2020/2184 of the European Parliament and of the Council (18), excluding distributors for which distribution of water for human consumption is a non-essential part of their general activity of distributing other commodities and goods
7. Waste Water		Undertakings collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water as defined in Article 2, points (1), (2) and (3), of Council Directive 91/271/EEC (19), excluding undertakings for which collecting, disposing of or treating urban waste water, domestic waste water or industrial waste water is a non-essential part of their general activity
8. Digital infrastructure		Providers of internet exchange points as defined in Article 6, point (18), of
		DNS service providers as defined in Article 6, point (20), of , excluding operators of root name servers
		top-level-domain name registries as defined in Article 6, point (21), of
		Providers of cloud computing services as defined in Article 6, point (30), of
		Providers of data centre services as defined in Article 6, point (31), of
		Providers of content delivery networks as defined in Article 6, point (32), of
		Trust service providers as defined in Article 3, point (19), of Regulation (EU) No 910/2014 of the European Parliament and of the Council
		Providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972 of the European Parliament and of the Council (21)
		Providers of electronic communications services as defined in Article 2, point (4), of Directive (EU) 2018/1972 insofar as their services are publicly available
9. Public administration		Public administration entities of central governments as defined by Member States in accordance with national law
10. Space		Operators of ground-based infrastructure, owned, managed and operated by Member States or by private parties, that support the provision of space-based services, excluding providers of public electronic communications networks as defined in Article 2, point (8), of Directive (EU) 2018/1972
11. Production, processing and distribution of food		Food businesses as defined in Article 3, point (2), of Regulation (EC) No 178/2002 of the European Parliament and of the Council (22) which are engaged exclusively in logistics and wholesale distribution and large scale industrial production and processing

National Definitions

Chile

Chile's national critical information infrastructure is categorised by the following critical sectors: }}

1. energía (energy)
2. telecomunicaciones (telecommunications)
3. agua (water)
4. salud (health)
5. servicios financieros (financial services)
6. seguridad pública (public safety)
7. transporte (transport)
8. administración pública (civil service)
9. protección civil (civil protection)
10. defense(defence)

Qatar

The critical sectors which comprise Qatar's national critical infrastructure include but are not restricted to  :

1. Energy, Electricity, and Water (قطاع الطاقة والكهرباء والماء)
2. Finance (القطاع الما ي ل)
3. Government (القطاع الحكومي)
4. Healthcare (قطاع الرعاية الصحية)
5. Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
6. Transportation (قطاع النقل والمواصلات)

Republic of Trinidad & Tobago

The national cyber security strategy recognizes the following critical information infrastructure sectors :

1. Banking and financial services
2. Communications infrastructure
3. Public health
4. Public safety
5. Public transportation
6. Key infrastructure

Sierra Leone

The Critical National Information Infrastructure encompasses The Cyber Security and Crime Act 2021

1. the security, defence or international relations of Siena Leone
2. criminal law enforcement
3. communications infrastructure
4. banking and financial services
5. public utilities
6. public transportation
7. public-key infrastructure
8. public safety and essential emergency services.
   

Vietnam

The 11 key cyber security protection areas (11 lĩnh vực) include : (* 12 key areas are listed)

1. transport,
2. energy,
3. natural resources and environment,
4. information,
5. health,
6. finance,
7. banking,
8. defence,
9. security,
10. social order and safety,
11. urban areas, and
12. the Government's direction and administration.

See also

• Sector-Specific Agency (SSA)