Difference between revisions of "Critical Infrastructure"

From CIPedia
Jump to navigation Jump to search
(See also)
(Germany)
(37 intermediate revisions by the same user not shown)
Line 5: Line 5:
 
=== European Definitions ===
 
=== European Definitions ===
 
==== [[EU|Council Directive 2008/114/EC]] ====
 
==== [[EU|Council Directive 2008/114/EC]] ====
{{definition|An [[asset]], [[system]] or part thereof located in Member States which is essential for the maintenance of [[Vital Services|vital societal functions]], health, safety, security, economic or social well-being of people, and the [[disruption]] or destruction of which would have a significant [[impact]] in a Member State as a result of the [[failure]] to maintain those functions. <ref>[http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2008:345:0075:0082:EN:PDF Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref> }}
+
{{definition|An [[asset]], [[system]] or part thereof located in Member States which is essential for the maintenance of [[Vital Services|vital societal functions]], health, safety, security, economic or social well-being of people, and the [[disruption]] or destruction of which would have a significant [[impact]] in a Member State as a result of the [[failure]] to maintain those functions. <ref>[http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2008:345:0075:0082:EN:PDF Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref> }}<br/>
 +
==== [[ECA]] ====
 +
{{definition|Critical infrastructure: Physical resources, services and facilities of which the disruption or destruction would have a serious impact on the functioning of the economy and society. <ref name="ECA">[https://www.eca.europa.eu/Lists/ECADocuments/BRP_CYBERSECURITY/BRP_CYBERSECURITY_EN.pdf European Court of Auditors, Challenges to effective EU cybersecurity policy, Briefing Paper, March 2019]</ref><br/><br/>[BG] Критична инфраструктура: Физически ресурси, услуги и съоръжения, чието  нарушаване или унищожаване би имало сериозни последици за функционирането на икономиката и обществото.<br/><br/>[CS] Kritická infrastruktura: Fyzické zdroje, služby a zařízení, jejichž nefunkčnost nebo zničení by mělo vážný dopad na fungování hospodářství a společnosti.<br/><br/>[DE] Kritische Infrastruktur: Physische Ressourcen, Dienste und Anlagen, deren Störung oder Zerstörung gravierende Auswirkungen auf das Funktionieren von Wirtschaft und Gesellschaft hätte. <br/><br/>[DK] Kritisk infrastruktur: Fysiske ressourcer, tjenester og anlæg, hvis afbrydelse eller ødelæggelse vil have alvorlige virkninger for økonomien og samfundet.<br/><br/>[ES] Infraestructuras críticas: Recursos físicos, servicios e instalaciones cuya perturbación o destrucción tendría un grave impacto sobre el funcionamiento de la economía y la sociedad.<br/><br/>[NE] Kritieke infrastructuur: Fysieke hulpmiddelen, diensten en voorzieningen waarvan de verstoring of vernieling ernstige gevolgen zou hebben voor de werking van de economie en de samenleving.}}<br/><br/>
  
 +
=== Other International Definitions ===
 +
==== [[Critical5]] ====
 +
{{definition|Critical infrastructure, also referred to as nationally significant infrastructure, can be broadly defined as the systems, assets, facilities and networks that provide essential services and are necessary for the national security, economic security, prosperity, and health and safety of their respective nations.  <ref>https://www.cisa.gov/sites/default/files/publications/critical-five-shared-narrative-critical-infrastructure-2014-508.pdf Forging a Common Understanding for Critical Infrastructure (2014)</ref>}}<br/><br/>
  
=== Other International Definitions ===
 
 
==== [[ITU-T]] ====
 
==== [[ITU-T]] ====
{{definition|Critical Infrastructure: the key systems, services and functions whose disruption or destruction would have a  debilitating impact on public health and safety, commerce, and [[National Security|national security]], or any combination of these. <ref>ITU Study Group Q.22/1 Report on Best Practices for a National Approach to Cybersecurity: A Management Framework for Organizing National Cybersecurity Efforts, ITU-D Secretariat, Geneva (2008).</ref>}}<br />
+
{{definition|Critical Infrastructure: the key systems, services and functions whose disruption or destruction would have a  debilitating impact on public health and safety, commerce, and [[National Security|national security]], or any combination of these. <ref>ITU Study Group Q.22/1 Report on Best Practices for a National Approach to Cybersecurity: A Management Framework for Organizing National Cybersecurity Efforts, ITU-D Secretariat, Geneva (2008).</ref>}}<br/><br/>
  
 
==== [[NATO]]====
 
==== [[NATO]]====
Line 20: Line 24:
 
<br />
 
<br />
  
==== [[UNISDR]] ====
+
==== [[UNDRR]] ====
<big>UNISDR refers to "Critical facilities" as</big>  
+
<big>UNDRR refers to "Critical facilities" as</big>  
 
{{definition|the primary physical structures, technical facilities and [[system|systems]] which are socially, economically or operationally essential to the functioning of a society or community, both in routine circumstances and in the extreme circumstances of an [[emergency]]. <ref>[http://www.unisdr.org/we/inform/terminology 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.]</ref>}}
 
{{definition|the primary physical structures, technical facilities and [[system|systems]] which are socially, economically or operationally essential to the functioning of a society or community, both in routine circumstances and in the extreme circumstances of an [[emergency]]. <ref>[http://www.unisdr.org/we/inform/terminology 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.]</ref>}}
 
<big>Critical facilities are considered as elements of the infrastructure that support [[Vital Services|essential services]] in a society.</big><br />
 
<big>Critical facilities are considered as elements of the infrastructure that support [[Vital Services|essential services]] in a society.</big><br />
Line 31: Line 35:
 
{{definition| Kemudahan – kemudahan kritikal: Ulasan: Kemudahan kritikal adalah infrastruktur yang menyokong perkhidmatan penting dalam masyarakat. Ia termasuk sistem pengangkutan, udara dan laut, bekalan elektrik, air, sistem komunikasi, hospital, klinik kesihatan, bomba, polis dan perkhidmatan pentadbiran awam.  <ref>[http://www.preventionweb.net/files/7817_isdrmalaysiaterminology.pdf UNISDR glossary in Malay]</ref>}}<br/>
 
{{definition| Kemudahan – kemudahan kritikal: Ulasan: Kemudahan kritikal adalah infrastruktur yang menyokong perkhidmatan penting dalam masyarakat. Ia termasuk sistem pengangkutan, udara dan laut, bekalan elektrik, air, sistem komunikasi, hospital, klinik kesihatan, bomba, polis dan perkhidmatan pentadbiran awam.  <ref>[http://www.preventionweb.net/files/7817_isdrmalaysiaterminology.pdf UNISDR glossary in Malay]</ref>}}<br/>
 
{{definition|Kritikal na mga Pasilidad: Ang mga pangunahing pisikal na istruktura, teknikal na mga pasilidad at sistema na mahalaga sa lipunan at ekonomya at sa paggana ng lipunan at komunidad, sa ordinaryo mang takbo ng buhay at maging sa matitinding pangkagipitang sitwasyon. <ref>[http://www.preventionweb.net/files/7817_isdrphillipinesterminology.pdf UNISDR glossary in Tagalog]</ref>}}<br/><br/>
 
{{definition|Kritikal na mga Pasilidad: Ang mga pangunahing pisikal na istruktura, teknikal na mga pasilidad at sistema na mahalaga sa lipunan at ekonomya at sa paggana ng lipunan at komunidad, sa ordinaryo mang takbo ng buhay at maging sa matitinding pangkagipitang sitwasyon. <ref>[http://www.preventionweb.net/files/7817_isdrphillipinesterminology.pdf UNISDR glossary in Tagalog]</ref>}}<br/><br/>
 +
Moreover, Important Infrastructure is defined by UNDRR as:
 +
{{definition|重要基础设施 - 提供对一个社区或社 :  会的社会和经济运作至关重要的服务的实体结构、设施、网络和其他资产。 <ref>[https://www.preventionweb.net/files/50683_oiewgreportenglish.pdf 2009 UNDRR Terminology on Disaster Risk Reduction in Chinese]</ref>}}<br/><br/>
  
 
=== National Definitions ===
 
=== National Definitions ===
Line 56: Line 62:
 
<br /><br />
 
<br /><br />
 
{{definition|Kritieke infrastructuur: een voorziening, systeem of een deel daarvan op het grondgebied van de lidstaten dat van essentieel belang is voor het behoud van vitale maatschappelijke functies, de gezondheid, de veiligheid, de beveiliging, de economische welvaart of het maatschappelijk welzijn, waarvan de verstoring of vernietiging in een lidstaat aanzienlijke gevolgen zou hebben doordat die functies ontregeld zouden raken.  <ref>[http://eur-lex.europa.eu/legal-content/NL/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}} <br /><br />
 
{{definition|Kritieke infrastructuur: een voorziening, systeem of een deel daarvan op het grondgebied van de lidstaten dat van essentieel belang is voor het behoud van vitale maatschappelijke functies, de gezondheid, de veiligheid, de beveiliging, de economische welvaart of het maatschappelijk welzijn, waarvan de verstoring of vernietiging in een lidstaat aanzienlijke gevolgen zou hebben doordat die functies ontregeld zouden raken.  <ref>[http://eur-lex.europa.eu/legal-content/NL/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}} <br /><br />
{{definition|Infrastructure critique: un point, système ou partie de celuici, situé dans les États membres, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’arrêt ou la destruction aurait un impact significatif dans un État membre du fait de la défaillance de ces fonctions.  <ref>[http://eur-lex.europa.eu/legal-content/FR/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br /><br />
+
{{definition|Infrastructure critique: un point, système ou partie de celuici, situé dans les États membres, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’arrêt ou la destruction aurait un impact significatif dans un État membre du fait de la défaillance de ces fonctions.  <ref>[http://eur-lex.europa.eu/legal-content/FR/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br/><br />
 +
====[[Belize]]====
 +
{{definition|Critical infrastructure: Includes those sectors whose assets, systems, and networks, whether physical or virtual, are considered so vital that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof. <ref>[https://www.pressoffice.gov.bz/wp-content/uploads/2019/12/belize-cybersecurity-strategy-2020-2023.pdf National Cybersecurity Strategy - Towards A Secure Cyberspace 2020-2023 (2020)]</ref>}}
 +
<br/><br/>
  
 
==== [[Brazil]] ====
 
==== [[Brazil]] ====
Line 65: Line 74:
 
{{definition|критична инфраструктура означава елемент, система или части от нея, намиращи се в държавите-членки, които са от основно значение за поддържането на жизненоважни обще¬ ствени функции, здравето, безопасността, сигурността, иконо¬ мическото или социалното благосъстояние на населението, и чието нарушаване или унищожаване би имало значителни последици в дадената държава-членка в резултат на невъз¬ можността да се запазят тези функции.  <ref> [http://eur-lex.europa.eu/legal-content/BG/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br /><br />
 
{{definition|критична инфраструктура означава елемент, система или части от нея, намиращи се в държавите-членки, които са от основно значение за поддържането на жизненоважни обще¬ ствени функции, здравето, безопасността, сигурността, иконо¬ мическото или социалното благосъстояние на населението, и чието нарушаване или унищожаване би имало значителни последици в дадената държава-членка в резултат на невъз¬ можността да се запазят тези функции.  <ref> [http://eur-lex.europa.eu/legal-content/BG/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br /><br />
 
==== [[Canada]] ====
 
==== [[Canada]] ====
{{definition| Critical infrastructure refers to processes, systems, facilities, technologies, networks, [[Asset|assets]] and services essential to the health, safety, security or economic well-being of Canadians and the effective functioning of government.<br /><br />Ensemble des processus, des systèmes, des installations, des technologies, des réseaux, des biens et des services nécessaires pour assurer la santé, la sûreté, la sécurité ou le bien-être économique des Canadiens ainsi que le fonctionnement efficace du gouvernement. <ref> [http://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/mrgnc-mngmnt-frmwrk/index-eng.aspx An Emergency Management Framework for Canada (Second Edition) </ref>}}
+
{{definition| Critical infrastructure refers to processes, systems, facilities, technologies, networks, [[Asset|assets]] and services essential to the health, safety, security or economic well-being of Canadians and the effective functioning of government.<br /><br />Ensemble des processus, des systèmes, des installations, des technologies, des réseaux, des biens et des services nécessaires pour assurer la santé, la sûreté, la sécurité ou le bien-être économique des Canadiens ainsi que le fonctionnement efficace du gouvernement. <ref>[http://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/mrgnc-mngmnt-frmwrk/index-eng.aspx An Emergency Management Framework for Canada (Second Edition) ]</ref>}}
 
Critical infrastructure can be stand-alone or interconnected and interdependent within and across provinces, territories and national borders. Disruptions of critical infrastructure could result in catastrophic loss of life, adverse economic effects, and significant harm to public confidence.<br /><br />
 
Critical infrastructure can be stand-alone or interconnected and interdependent within and across provinces, territories and national borders. Disruptions of critical infrastructure could result in catastrophic loss of life, adverse economic effects, and significant harm to public confidence.<br /><br />
  
Line 99: Line 108:
  
 
==== [[Finland]] ====
 
==== [[Finland]] ====
{{definition|Critical infrastructure refers to the structures and functions which are indispensable for the vital functions of society. They comprise physical facilities and structures as well as electronic functions and services. <ref>[http://www.enisa.europa.eu/activities/Resilience-and-CIIP/national-cyber-security-strategies-ncsss/FinlandsCyberSecurityStrategy.pdf Finlands' Cyber Security Strategy]</ref>}}
+
{{definition|Critical infrastructure refers to the structures and functions which are indispensable for the vital functions of society. They comprise physical facilities and structures as well as electronic functions and services. <ref>[http://www.enisa.europa.eu/activities/Resilience-and-CIIP/national-cyber-security-strategies-ncsss/FinlandsCyberSecurityStrategy.pdf Finlands' Cyber Security Strategy (2013)]</ref>}}
 
<br />
 
<br />
 
{{definition|Kriittinen infrastruktuuri: perusrakenteet, palvelut ja niihin liittyvät toiminnot, jotka ovat välttämättömiä yhteiskunnan elintärkeiden toimintojen ylläpitämiseksi.<br/><br/>Critical infrastructure comprise basic structures and services and related functions which are essential to maintain the vital operations of society. -''unofficial translation''- <ref name=TSK>[http://www.spek.fi/loader.aspx?id=1c66e01d-a75e-4a9a-80ec-9816340ce752 Vocabulary of Comprehensive Security. Helsinki (TSK 47) (2014)]</ref>}}<br /><br/>
 
{{definition|Kriittinen infrastruktuuri: perusrakenteet, palvelut ja niihin liittyvät toiminnot, jotka ovat välttämättömiä yhteiskunnan elintärkeiden toimintojen ylläpitämiseksi.<br/><br/>Critical infrastructure comprise basic structures and services and related functions which are essential to maintain the vital operations of society. -''unofficial translation''- <ref name=TSK>[http://www.spek.fi/loader.aspx?id=1c66e01d-a75e-4a9a-80ec-9816340ce752 Vocabulary of Comprehensive Security. Helsinki (TSK 47) (2014)]</ref>}}<br /><br/>
Line 115: Line 124:
 
{{definition|Infrastructure critique: un point, système ou partie de celuici, situé dans les États membres, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’arrêt ou la destruction aurait un impact significatif dans un État membre du fait de la défaillance de ces fonctions.  <ref>[http://eur-lex.europa.eu/legal-content/FR/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br />
 
{{definition|Infrastructure critique: un point, système ou partie de celuici, situé dans les États membres, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’arrêt ou la destruction aurait un impact significatif dans un État membre du fait de la défaillance de ces fonctions.  <ref>[http://eur-lex.europa.eu/legal-content/FR/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br />
 
{{definition|Critical infrastructures are institutions, structures or facilities that provide the essential goods and services forming the backbone of French society and its way of life. <ref>[http://www.sgdsn.gouv.fr/uploads/2017/03/plaquette-saiv-anglais.pdf THE CRITICAL INFRASTRUCTURE PROTECTION IN FRANCE - factsheet SGDN (2017)]</ref>}}<br />
 
{{definition|Critical infrastructures are institutions, structures or facilities that provide the essential goods and services forming the backbone of French society and its way of life. <ref>[http://www.sgdsn.gouv.fr/uploads/2017/03/plaquette-saiv-anglais.pdf THE CRITICAL INFRASTRUCTURE PROTECTION IN FRANCE - factsheet SGDN (2017)]</ref>}}<br />
 
+
==== [[Gambia]] ====
 +
{{definition|''National'' Critical infrastructure (NCI): Infrastructure and assets the loss or compromise of which could result in a major detrimental impact on national security, national defence, the functioning of the state or essential economic, safety, public health or other social services.  <ref>[http://www.moici.gov.gm/sites/default/files/2019-09/20160726%20Gambia%20Strategy%20-%20Cybersecurity%20Strategy_final_with_Gambia_cover_page.pdf  THE GAMBIA NATIONAL CYBERSECURITY STRATEGY (2019)]</ref>}}<br />
 
==== [[Germany]] ====
 
==== [[Germany]] ====
{{definition|Critical infrastructures (CI) are organizational and physical structures and facilities of such vital importance to a nation's society and economy that their [[failure]] or degradation would result in sustained supply shortages, significant [[disruption|disruptions]] of public safety and security, or other dramatic [[consequence|consequences]]. <ref>[http://www.kritis.bund.de/SharedDocs/Downloads/Kritis/EN/CIP-Strategy.pdf National Strategy for Critical Infrastructure Protection(CIP Strategy), BMI 17 June 2009.]</ref><br /><br />Kritische Infrastrukturen (KRITIS) sind Organisationen oder Einrichtungen mit wichtiger Bedeutung für das staatliche Gemeinwesen, bei deren Ausfall oder Beeinträchtigung nachhaltig wirkende Versorgungsengpässe, erhebliche Störungen der öffentlichen Sicherheit oder andere dramatische Folgen eintreten würden. <ref>[http://www.bmi.bund.de/SharedDocs/Downloads/DE/Broschueren/2009/kritis.pdf Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)), BMI 17 June 2009.]</ref>}}<br />
+
{{definition|Critical infrastructures (CI) are organizational and physical structures and facilities of such vital importance to a nation's society and economy that their [[failure]] or degradation would result in sustained supply shortages, significant [[disruption|disruptions]] of public safety and security, or other dramatic [[consequence|consequences]]. <ref>[http://www.kritis.bund.de/SharedDocs/Downloads/Kritis/EN/CIP-Strategy.pdf National Strategy for Critical Infrastructure Protection(CIP Strategy), BMI 17 June 2009.]</ref><br /><br />Kritische Infrastrukturen (KRITIS) sind Organisationen oder Einrichtungen mit wichtiger Bedeutung für das staatliche Gemeinwesen, bei deren Ausfall oder Beeinträchtigung nachhaltig wirkende Versorgungsengpässe, erhebliche Störungen der öffentlichen Sicherheit oder andere dramatische Folgen einträten. <ref>[http://www.bmi.bund.de/SharedDocs/Downloads/DE/Broschueren/2009/kritis.pdf Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)), BMI 17 June 2009.]</ref> <ref>[https://www.bmi.bund.de/SharedDocs/downloads/DE/veroeffentlichungen/2021/06/entwurf-cybersicherheitsstrategie-2021.pdf DRAFT Cyber-Sicherheitsstrategie für Deutschland 2021]</ref>}}<br />
 
The law about IT-security defines CI as:
 
The law about IT-security defines CI as:
 
{{definition|Kritische Infrastrukturen ''(im Sinne dieses Gesetzes)'' sind Einrichtungen, Anlagen oder Teile davon, die (1) den Sektoren Energie, Informationstechnik und Telekommunikation, Transport und Verkehr, Gesundheit, Wasser, Ernährung sowie Finanz- und Versicherungswesen angehören und (2) von hoher Bedeutung für das Funktionieren des Gemeinwesens sind, weil durch ihren Ausfall oder ihre Beeinträchtigung erhebliche Versorgungsengpässe oder Gefährdungen für die öffentliche Sicherheit eintreten würden. <ref>[http://dip21.bundestag.de/dip21/btd/18/040/1804096.pdf Entwurf eines Gesetzes zur Erhöhung der Sicherheit informationstechnischer Systeme (IT-Sicherheitsgesetz), Deutsche Bundcestag Drucksache 18/4096 (June, 2015))]</ref><br/><br/> (unofficial translation) Critical infrastructures (within the meaning of this law) are installations or facilities or parts thereof (1) in the Energy, ICT, Transport, Health, Water, Agriculture and Financial sectors and (2) that are key to the functioning of the society while their failure or degration result in serious service disruption or danger to the public security. }}<br /><br/>
 
{{definition|Kritische Infrastrukturen ''(im Sinne dieses Gesetzes)'' sind Einrichtungen, Anlagen oder Teile davon, die (1) den Sektoren Energie, Informationstechnik und Telekommunikation, Transport und Verkehr, Gesundheit, Wasser, Ernährung sowie Finanz- und Versicherungswesen angehören und (2) von hoher Bedeutung für das Funktionieren des Gemeinwesens sind, weil durch ihren Ausfall oder ihre Beeinträchtigung erhebliche Versorgungsengpässe oder Gefährdungen für die öffentliche Sicherheit eintreten würden. <ref>[http://dip21.bundestag.de/dip21/btd/18/040/1804096.pdf Entwurf eines Gesetzes zur Erhöhung der Sicherheit informationstechnischer Systeme (IT-Sicherheitsgesetz), Deutsche Bundcestag Drucksache 18/4096 (June, 2015))]</ref><br/><br/> (unofficial translation) Critical infrastructures (within the meaning of this law) are installations or facilities or parts thereof (1) in the Energy, ICT, Transport, Health, Water, Agriculture and Financial sectors and (2) that are key to the functioning of the society while their failure or degration result in serious service disruption or danger to the public security. }}<br /><br/>
{{definition|Kritische Infrastruktur die in einem Mitgliedstaat gelegene Anlage, ein System oder ein Teil davon, die von wesentlicher Bedeutung für die Aufrechterhaltung wichtiger gesellschaftlicher Funktionen, der Gesundheit, der Sicherheit und des wirtschaftlichen oder sozialen Wohlergehens der Bevölkerung sind und deren Störung oder Zerstörung erhebliche Auswirkungen auf einen Mitgliedstaat hätte, da diese Funktionen nicht aufrechterhalten werden könnten.  <ref> [http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br /><br />
+
{{definition|Kritische Infrastruktur die in einem Mitgliedstaat gelegene Anlage, ein System oder ein Teil davon, die von wesentlicher Bedeutung für die Aufrechterhaltung wichtiger gesellschaftlicher Funktionen, der Gesundheit, der Sicherheit und des wirtschaftlichen oder sozialen Wohlergehens der Bevölkerung sind und deren Störung oder Zerstörung erhebliche Auswirkungen auf einen Mitgliedstaat hätte, da diese Funktionen nicht aufrechterhalten werden könnten.  <ref> [http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref> <ref>[https://www.bmi.bund.de/SharedDocs/downloads/DE/veroeffentlichungen/2021/06/entwurf-cybersicherheitsstrategie-2021.pdf DRAFT Cyber-Sicherheitsstrategie für Deutschland 2021]</ref>}}<br/><br />
 
From a climate change adaptation point of view:
 
From a climate change adaptation point of view:
 
{{definition|Critical infrastructures are organisations and facilities of great importance to the state, the failure or impairment of which would result in serious supply shortages, considerable disruption of public safety, or other dramatic consequences. <ref>[http://www.germany.info/contentblob/2293498/Daten/426241/Adaptation_DD.pdf Combating Climate Change: The German Adaptation Strategy]</ref>}}<br /><br/>
 
{{definition|Critical infrastructures are organisations and facilities of great importance to the state, the failure or impairment of which would result in serious supply shortages, considerable disruption of public safety, or other dramatic consequences. <ref>[http://www.germany.info/contentblob/2293498/Daten/426241/Adaptation_DD.pdf Combating Climate Change: The German Adaptation Strategy]</ref>}}<br /><br/>
Line 216: Line 226:
  
 
==== [[New Zealand]] ====
 
==== [[New Zealand]] ====
 +
{{definition|Critical infrastructure/critical national infrastructure: Physical and digital assets, services, and supply chains, the disruption (loss, compromise) of which would severely impact the maintenance of national security, public safety, fundamental rights, and well-being of all New Zealanders. <ref>[https://dpmc.govt.nz/sites/default/files/2019-07/Cyber%20Security%20Strategy.pdf New Zealand’s Cyber Security Strategy (2019)]</ref>}}<br/>
 
{{definition|National Critical infrastructure is a term used by governments to describe assets that are essential for the functioning of a society and economy. <ref>[http://www.enisa.europa.eu/activities/Resilience-and-CIIP/national-cyber-security-strategies-ncsss/nzcybersecuritystrategyjune2011_0.pdf New Zealand’s Cyber Security Strategy (2011)]</ref>}}  
 
{{definition|National Critical infrastructure is a term used by governments to describe assets that are essential for the functioning of a society and economy. <ref>[http://www.enisa.europa.eu/activities/Resilience-and-CIIP/national-cyber-security-strategies-ncsss/nzcybersecuritystrategyjune2011_0.pdf New Zealand’s Cyber Security Strategy (2011)]</ref>}}  
 
For instance, electricity generation, gas production, telecommunications, water supply etc.
 
For instance, electricity generation, gas production, telecommunications, water supply etc.
 
<br /><br />
 
<br /><br />
 +
 
==== [[Norway]] ====
 
==== [[Norway]] ====
 
{{definition|Kritisk infrastruktur er de anlegg og systemer som er helt nødvendige for å opprettholde samfunnets kritiske funksjoner som igjen dekker samfunnets grunnleggende behov og befolkningens trygghetsfølelse (NOU 6:2006, s. 31).<br /><br/>Critical infrastructure is the construction and systems essential to maintain society's critical features which covers society's basic needs and population's sense of security. <ref>[http://www.dsb.no/Global/Publikasjoner/2011/Rapport/KIKS.pdf VEILEDNING Sikkerhet i kritisk infrastruktur og kritiske samfunnsfunksjoner – modell for overordnet risikostyring]</ref><br />}}
 
{{definition|Kritisk infrastruktur er de anlegg og systemer som er helt nødvendige for å opprettholde samfunnets kritiske funksjoner som igjen dekker samfunnets grunnleggende behov og befolkningens trygghetsfølelse (NOU 6:2006, s. 31).<br /><br/>Critical infrastructure is the construction and systems essential to maintain society's critical features which covers society's basic needs and population's sense of security. <ref>[http://www.dsb.no/Global/Publikasjoner/2011/Rapport/KIKS.pdf VEILEDNING Sikkerhet i kritisk infrastruktur og kritiske samfunnsfunksjoner – modell for overordnet risikostyring]</ref><br />}}
Line 225: Line 237:
 
{{definition|Critical Infrastructure includes the infrastructures so designated by any Government in Pakistan and such other assets, systems and networks, whether physical or virtual, so vital to the State or its organs including judicature that their incapacitation or destruction may have a debilitating effect on national security, economy, public health, safety or matters related thereto. <ref>[http://www.na.gov.pk/uploads/documents/1421399434_340.pdf Government Proposed And Modified Cybercrime Bill 2015 approved by National Assembly, May 2016]</ref>}}<br /><br/>
 
{{definition|Critical Infrastructure includes the infrastructures so designated by any Government in Pakistan and such other assets, systems and networks, whether physical or virtual, so vital to the State or its organs including judicature that their incapacitation or destruction may have a debilitating effect on national security, economy, public health, safety or matters related thereto. <ref>[http://www.na.gov.pk/uploads/documents/1421399434_340.pdf Government Proposed And Modified Cybercrime Bill 2015 approved by National Assembly, May 2016]</ref>}}<br /><br/>
 
==== [[Papua New Guinea]]====
 
==== [[Papua New Guinea]]====
{{definition|Critical Infrastructure refers to the basic facilities, services and installations needed for the functioning of a community, society or government, including but not limited to transportation, communication systems, water supply, electricity supply, banking services, public institutions including health services, post offices and education srrvices. <ref>[http://www.nicta.gov.pg/images/cyber/act/Cybercrime%20Code%20Act%202016.pdf Papua New Guinea Criminal code act 2016]</ref>}}<br/>
+
{{definition|Critical Infrastructure refers to the basic facilities, services and installations needed for the functioning of a community, society or government, including but not limited to transportation, communication systems, water supply, electricity supply, banking services, public institutions including health services, post offices and education services. <ref>[http://www.nicta.gov.pg/images/cyber/act/Cybercrime%20Code%20Act%202016.pdf Papua New Guinea Criminal code act 2016]</ref>}}<br/>
  
 
==== [[Paraguay]] ====  
 
==== [[Paraguay]] ====  
Line 266: Line 278:
  
 
==== [[Slovenia]] ====
 
==== [[Slovenia]] ====
{{definition|Kritična infrastruktura državnega pomena v Republiki Sloveniji obsega tiste zmogljivosti in storitve, ki so ključnega pomena za državo in bi prekinitev njihovega delovanja ali njihovo uničenje pomembno vplivalo in imelo resne posledice na nacionalno varnost, gospodarstvo, ključne družbene funkcije, zdravje, varnost in zaščito ter družbeno blaginjo. <ref>[http://www.mo.gov.si/si/delovna_podrocja/zascita_kriticne_infrastrukture/]</ref><br>(equals the EU definition)}}<br/><br/>
+
{{definition|Kritična infrastruktura državnega pomena v Republiki Sloveniji obsega tiste zmogljivosti in storitve, ki so ključnega pomena za državo in bi prekinitev njihovega delovanja ali njihovo uničenje pomembno vplivalo in imelo resne posledice na nacionalno varnost, gospodarstvo, ključne družbene funkcije, zdravje, varnost in zaščito ter družbeno blaginjo. <ref>[http://www.mo.gov.si/si/delovna_podrocja/zascita_kriticne_infrastrukture/ Zascita_kriticne_infrastrukture]</ref><br>(equals the EU definition)}}<br/><br/>
{{definition|Kritična infrastruktura pomeni infrastrukturno zmogljivost, sistem ali njun del, ki se nahaja v državah članicah in je bistven za vzdrževanje ključnih družbenih funkcij, zdravja, varnosti, zaščite, gospodarske in družbene blaginje ljudi ter katerih okvara ali uničenje bi imelo v državi članici resne posledice zaradi nezmožnosti vzdrževanja teh funkcij.  <ref> [http://eur-lex.europa.eu/legal-content/SL/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br /><br />
+
{{definition|Kritična infrastruktura pomeni infrastrukturno zmogljivost, sistem ali njun del, ki se nahaja v državah članicah in je bistven za vzdrževanje ključnih družbenih funkcij, zdravja, varnosti, zaščite, gospodarske in družbene blaginje ljudi ter katerih okvara ali uničenje bi imelo v državi članici resne posledice zaradi nezmožnosti vzdrževanja teh funkcij.  <ref>[http://eur-lex.europa.eu/legal-content/SL/TXT/PDF/%3Furi%3DCELEX%3A32008L0114  Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection]</ref>}}<br/><br/>
  
 
==== [[South Africa]] ====
 
==== [[South Africa]] ====
 +
{{definition|‘‘iziseko ezibalulekileyo ezingundoqo’’ zizo naziphi na iziseko ezibhengezwe njengezibalulekileyo ngokwesiqendu 20(1) kwaye ziquka udederhu lweziseko ezibalulekileyo ezingundoqo apho okubhaliweyo kubonisa oko;<br/>‘‘udederhu lweziseko ezibalulekileyo ezingundoqo’’ ziziseko ezibalulekileyo ezingundoqo eziliqela zidityanisiwe ngezizathu ezivakalayo, ngokwesiqendu 20(1)(c); <br/><br/>‘‘critical infrastructure’’ means any infrastructure which is declared as such in terms of section 20(1) and includes a ''critical infrastructure complex'' where required by the context. <ref>[https://www.gov.za/sites/default/files/gcis_document/201911/4286628-11act8of2019criticalinfraprotectact.pdf Act No. 8 of 2019: Critical Infrastructure Protection Act, 2019]</ref>}}‘‘critical infrastructure complex’’ means more than one critical infrastructure grouped together for practical or administrative reasons, which is determined as such in terms of section 20(1)(c).<br/><br/>
 
{{definition|"critical infrastructure" means any infrastructure or infrastructure complex which is declared as such in terms of section 20(4). <ref>
 
{{definition|"critical infrastructure" means any infrastructure or infrastructure complex which is declared as such in terms of section 20(4). <ref>
[http://www.policesecretariat.gov.za/downloads/bills/CIP_Bill_for_Publication.pdf CIP Bill for publication 2015]</ref>}}<br /><br />
+
[http://www.policesecretariat.gov.za/downloads/bills/CIP_Bill_for_Publication.pdf CIP Bill for publication 2015]</ref>}}<br/><br/>
  
 
==== [[Spain]] ====
 
==== [[Spain]] ====
Line 299: Line 312:
 
<big>The United Kingdom (UK) defines '''national infrastructure''' as:</big>  
 
<big>The United Kingdom (UK) defines '''national infrastructure''' as:</big>  
 
{{definition|''those facilities, systems, sites and networks necessary for the functioning of the country and the delivery of the essential services upon which daily life in the UK depends''. <ref>[http://www.cpni.gov.uk/about/cni/ Centre for the Protection of National Infrastructure (CPNI)]</ref>}}
 
{{definition|''those facilities, systems, sites and networks necessary for the functioning of the country and the delivery of the essential services upon which daily life in the UK depends''. <ref>[http://www.cpni.gov.uk/about/cni/ Centre for the Protection of National Infrastructure (CPNI)]</ref>}}
<big>
 
 
In the approach of the UK, infrastructure is categorised according to its value or “criticality” and the [[impact]] of its loss. This categorisation is done using the Government “[[Criticality Scale]]”, which assigns categories for different degrees of severity of [[impact]].
 
In the approach of the UK, infrastructure is categorised according to its value or “criticality” and the [[impact]] of its loss. This categorisation is done using the Government “[[Criticality Scale]]”, which assigns categories for different degrees of severity of [[impact]].
  
Not everything within a national infrastructure sector is “critical”. Within the sectors there are certain “critical” elements of [[infrastructure]], the loss or compromise of which would have a major detrimental [[impact]] on the [[availability]] or [[integrity]] of essential services, leading to severe economic or social [[consequence|consequences]] or to loss of life. These “critical” assets make up the nation's [[Critical National Infrastructure|critical national infrastructure]] ([[NCI|CNI]]) and are referred to individually as “infrastructure assets”. Infrastructure [[asset|assets]] may be physical (e.g. sites, installations, pieces of equipment) or logical (e.g. information networks, systems).</big>
+
Not everything within a national infrastructure sector is “critical”. Within the sectors there are certain “critical” elements of [[infrastructure]], the loss or compromise of which would have a major detrimental [[impact]] on the [[availability]] or [[integrity]] of essential services, leading to severe economic or social [[consequence|consequences]] or to loss of life. These “critical” assets make up the nation's [[Critical National Infrastructure|critical national infrastructure]] ([[NCI|CNI]]) and are referred to individually as “infrastructure assets”. Infrastructure [[asset|assets]] may be physical (e.g. sites, installations, pieces of equipment) or logical (e.g. information networks, systems).
<br /><br />
+
<br/><br/>
{{definition|Critical infrastructure means an asset, system or part thereof located in Member States which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions.  <ref>[http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br /><br />
+
{{definition|Critical infrastructure means an asset, system or part thereof located in Member States which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions.  <ref>[http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32008L0114&from=EN Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>}}<br/>
  
 
{{definition|Critical Infrastructure (CI): A term used to describe [[Critical National Infrastructure]] and other infrastructure of national significance as well as infrastructure and assets of local significance. <ref>[https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/61046/EP_Glossary_amends_18042012_0.pdf Cabinet Office, Glossary - Revision to Emergency Preparedness 2011]</ref>}}<br/>
 
{{definition|Critical Infrastructure (CI): A term used to describe [[Critical National Infrastructure]] and other infrastructure of national significance as well as infrastructure and assets of local significance. <ref>[https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/61046/EP_Glossary_amends_18042012_0.pdf Cabinet Office, Glossary - Revision to Emergency Preparedness 2011]</ref>}}<br/>
Line 315: Line 327:
 
===== [[DoD]]=====
 
===== [[DoD]]=====
 
{{definition|Critical infrastructure and key resources (CI/KR) — The infrastructure and assets vital to a nation’s security, governance, public health and safety, economy, and public confidence (source: JP 3-27). <ref>[http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)]</ref>}}<br/>
 
{{definition|Critical infrastructure and key resources (CI/KR) — The infrastructure and assets vital to a nation’s security, governance, public health and safety, economy, and public confidence (source: JP 3-27). <ref>[http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)]</ref>}}<br/>
{{definition|'''Defense''' critical infrastructure (DCI): Department of Defense and non-Department of Defense networked assets and facilities essential to project, support, and sustain military forces and operations worldwide. (JP 3-27). <ref>[http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)]</ref>}}<br/><br />
+
{{definition|'''Defense''' critical infrastructure (DCI): Department of Defense and non-Department of Defense networked assets and facilities essential to project, support, and sustain military forces and operations worldwide. (JP 3-27). <ref>[http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)]</ref>}}<br/>
 +
 
 +
===== [[NIST]]=====
 +
{{definition|CI: System and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. <ref>[https://csrc.nist.gov/glossary/term/Operational-technology NIST Glossary/ NIST SP 800-30 / CNSSI 4009-2015]</ref>}}<br/>
 +
{{definition|CI: Essential services and related assets that underpin American society and serve as the backbone of the nation's economy, security, and health. <ref>[https://csrc.nist.gov/glossary/term/Operational-technology NIST Glossary/ NISTIR 8183]</ref>}}<br/><br/>
 +
 
 
==== [[Virgin Islands]] ====
 
==== [[Virgin Islands]] ====
 
{{definition|Critical infrastructure is comprised of those assets essential for the functioning of a society and economy. <ref>[http://www.bvi.gov.vg/pub/The%20Virgin%20Islands%20Climate%20Change%20Green%20Paper_FINAL_TO%20PRINT.pdf The Virgin Islands Climate Change Green Paper Prepared by the Conservation and Fisheries Department, Ministry of Natural Resources and Labour (2010)]</ref>}}<br/><br />
 
{{definition|Critical infrastructure is comprised of those assets essential for the functioning of a society and economy. <ref>[http://www.bvi.gov.vg/pub/The%20Virgin%20Islands%20Climate%20Change%20Green%20Paper_FINAL_TO%20PRINT.pdf The Virgin Islands Climate Change Green Paper Prepared by the Conservation and Fisheries Department, Ministry of Natural Resources and Labour (2010)]</ref>}}<br/><br />
Line 354: Line 371:
  
 
[[Category:Infrastructure]][[Category:Policy]]
 
[[Category:Infrastructure]][[Category:Policy]]
{{#set:defined by=EU|defined by=ITU-T|defined by=NATO|defined by=UNISDR|defined by=Argentina|defined by=Australia|defined by=Austria|defined by=Barbados|defined by=Belgium|defined by=Brazil|defined by=Bulgaria|defined by=Canada|defined by=Colombia|defined by=Costa Rica|defined by=Croatia|defined by=Cuba|defined by=Cyprus|defined by=Czech Republic|defined by=Denmark|defined by=Ecuador|defined by=Estonia|defined by=Ethiopia|defined by=Finland|defined by=France|defined by=Germany|defined by=Greece|defined by=Guatemala|defined by=Guinée|defined by=Hungary|defined by=India|defined by=Indonesia|defined by=Italy|defined by=Israel|defined by=Ireland|defined by=Jamaica|defined by=Japan|defined by=Kenya|defined by=Kingdom of Saudi Arabia|defined by=Kosovo|defined by=Latvia|defined by=Lithuania|defined by=Luxembourg|defined by=Malta|defined by=Mexico|defined by=Moldova|defined by=Montenegro|defined by=Netherlands|defined by=New Zealand|defined by=Norway|defined by=Pakistan|defined by=Papua New Guinea|defined by=Paraguay|defined by=Philippines|defined by=Poland|defined by=Portugal|defined by=Romania|defined by=Qatar|defined by=Republic of Slovenia|defined by=Slovenia|defined by=Slovakia|defined by=Spain|defined by=Republic of Trinidad & Tobago|defined by=Russian Federation|defined by=South Africa|defined by=Sweden|defined by=Spain|defined by=Switzerland|defined by=Turkey|defined by=Uganda|defined by=Ukraine|defined by=United Kingdom|defined by=United States|defined by=Virgin Islands|defined by=ISO|defined by=Ontario|defined by=Malta|defined by=IETF|defined by=NATO|defined by=Queensland}}
+
{{#set:defined by=EU|defined by=ECA|defined by=ITU-T|defined by=NATO|defined by=UNISDR|defined by=Argentina|defined by=Australia|defined by=Austria|defined by=Barbados|defined by=Belgium|defined by=Belize|defined by=Brazil|defined by=Bulgaria|defined by=Canada|defined by=Colombia|defined by=Costa Rica|defined by=Croatia|defined by=Cuba|defined by=Cyprus|defined by=Czech Republic|defined by=Denmark|defined by=Ecuador|defined by=Estonia|defined by=Ethiopia|defined by=Finland|defined by=France|defined by=Gambia|defined by=Germany|defined by=Greece|defined by=Guatemala|defined by=Guinée|defined by=Hungary|defined by=India|defined by=Indonesia|defined by=Italy|defined by=Israel|defined by=Ireland|defined by=Jamaica|defined by=Japan|defined by=Kenya|defined by=Kingdom of Saudi Arabia|defined by=Kosovo|defined by=Latvia|defined by=Lithuania|defined by=Luxembourg|defined by=Malta|defined by=Mexico|defined by=Moldova|defined by=Montenegro|defined by=Netherlands|defined by=New Zealand|defined by=Norway|defined by=Pakistan|defined by=Papua New Guinea|defined by=Paraguay|defined by=Philippines|defined by=Poland|defined by=Portugal|defined by=Romania|defined by=Qatar|defined by=Republic of Slovenia|defined by=Slovenia|defined by=Slovakia|defined by=Spain|defined by=Republic of Trinidad & Tobago|defined by=Russian Federation|defined by=South Africa|defined by=Sweden|defined by=Spain|defined by=Switzerland|defined by=Turkey|defined by=Uganda|defined by=Ukraine|defined by=United Kingdom|defined by=United States|defined by=Virgin Islands|defined by=ISO|defined by=Ontario|defined by=Malta|defined by=IETF|defined by=NATO|defined by=Queensland|defined by=NIST}}
  
 
[[Category:RESIN-Glossary]][[Category:CIPRNet-Glossary]]
 
[[Category:RESIN-Glossary]][[Category:CIPRNet-Glossary]]
 
{{#set:defined by=EU|Council Directive 2008/114/EC|ISO|ISO/IEC TR 27019:2013}}
 
{{#set:defined by=EU|Council Directive 2008/114/EC|ISO|ISO/IEC TR 27019:2013}}
 
{{#set: Showmainpage=Yes}}
 
{{#set: Showmainpage=Yes}}

Revision as of 23:37, 11 September 2021

While there is not a commonly accepted definition of critical infrastructure (CI), all definitions emphasize the contributing role of a CI to the society or the debilitating effect in the case of disruption. Another common characteristic of CI is that they are complex in their structure, which makes the issue of dependencies and common cause failure an important topic to society.

Contents

Abbreviation

CI

Definitions

European Definitions

Council Directive 2008/114/EC

An asset, system or part thereof located in Member States which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions. [1]


ECA

Critical infrastructure: Physical resources, services and facilities of which the disruption or destruction would have a serious impact on the functioning of the economy and society. [2]

[BG] Критична инфраструктура: Физически ресурси, услуги и съоръжения, чието нарушаване или унищожаване би имало сериозни последици за функционирането на икономиката и обществото.

[CS] Kritická infrastruktura: Fyzické zdroje, služby a zařízení, jejichž nefunkčnost nebo zničení by mělo vážný dopad na fungování hospodářství a společnosti.

[DE] Kritische Infrastruktur: Physische Ressourcen, Dienste und Anlagen, deren Störung oder Zerstörung gravierende Auswirkungen auf das Funktionieren von Wirtschaft und Gesellschaft hätte.

[DK] Kritisk infrastruktur: Fysiske ressourcer, tjenester og anlæg, hvis afbrydelse eller ødelæggelse vil have alvorlige virkninger for økonomien og samfundet.

[ES] Infraestructuras críticas: Recursos físicos, servicios e instalaciones cuya perturbación o destrucción tendría un grave impacto sobre el funcionamiento de la economía y la sociedad.

[NE] Kritieke infrastructuur: Fysieke hulpmiddelen, diensten en voorzieningen waarvan de verstoring of vernieling ernstige gevolgen zou hebben voor de werking van de economie en de samenleving.



Other International Definitions

Critical5

Critical infrastructure, also referred to as nationally significant infrastructure, can be broadly defined as the systems, assets, facilities and networks that provide essential services and are necessary for the national security, economic security, prosperity, and health and safety of their respective nations. [3]



ITU-T

Critical Infrastructure: the key systems, services and functions whose disruption or destruction would have a debilitating impact on public health and safety, commerce, and national security, or any combination of these. [4]



NATO

CCD-CoE (Tallinn manual)
Critical Infrastructure: Physical or virtual systems and assets under the jurisdiction of a State that are so vital that their incapacitation or destruction may debilitate a State’s security, economy, public health or safety, or the environment. [5]


CEP / EAPC
Critical infrastructure is those facilities, services and information systems which are so vital to nations that their incapacity or destruction would have a debilitating impact on national security, national economy, public health and safety and the effective functioning of the government. [6]


UNDRR

UNDRR refers to "Critical facilities" as

the primary physical structures, technical facilities and systems which are socially, economically or operationally essential to the functioning of a society or community, both in routine circumstances and in the extreme circumstances of an emergency. [7]

Critical facilities are considered as elements of the infrastructure that support essential services in a society.

Points critiques: Les réseaux principaux, les installations techniques et autres systèmes qui sont essentiels d’un point de vue social, économique ou opérationnel au fonctionnement d’une société ou d’une communauté, aussi bien au quotidien qu’en situation d’urgence. [8]


Жизненно важные объекты: Ключевые объекты материальной инфраструктуры, технические сооружения и системы, которые играют жизненно важную роль в социальном, экономическом и функциональном отношении для существования общества или общины как в обычных обстоятельствах, так и в условиях чрезвычайной ситуации. [9]


Instalaciones vitales: Las estructuras físicas, instalaciones técnicas y sistemas principales que son social, económica u operativamente esenciales para el funcionamiento de una sociedad o comunidad, tanto en circunstancias habituales como extremas durante una emergencia. [10]


المرافق الحساسة : الأنشطة الإدارية التي تعنى بالتقليل من، أو معالجة المخاطر القائمة. [11]


Kerentanan: Karakteristik dan kondisi sebuah komunitas, sistem atau aset yang membuatnya cenderung terkena dampak merusak yang diakibatkan ancaman bahaya. [12]


Kemudahan – kemudahan kritikal: Ulasan: Kemudahan kritikal adalah infrastruktur yang menyokong perkhidmatan penting dalam masyarakat. Ia termasuk sistem pengangkutan, udara dan laut, bekalan elektrik, air, sistem komunikasi, hospital, klinik kesihatan, bomba, polis dan perkhidmatan pentadbiran awam. [13]


Kritikal na mga Pasilidad: Ang mga pangunahing pisikal na istruktura, teknikal na mga pasilidad at sistema na mahalaga sa lipunan at ekonomya at sa paggana ng lipunan at komunidad, sa ordinaryo mang takbo ng buhay at maging sa matitinding pangkagipitang sitwasyon. [14]



Moreover, Important Infrastructure is defined by UNDRR as:

重要基础设施 - 提供对一个社区或社 : 会的社会和经济运作至关重要的服务的实体结构、设施、网络和其他资产。 [15]



National Definitions

Argentina

Líneas vitales/Infraestructuras críticas: Es la infraestructura básica o esencial, que brinda servicios esenciales para el mantenimiento de las funciones sociales básicas de salud, seguridad, economía y el eficaz funcionamiento del Estado. [16]



Australia

Critical infrastructures are those physical facilities, supply chains, information technologies and communication networks which, if destroyed, degraded or rendered unavailable for an extended period, would significantly impact on the social or economic wellbeing of the nation or affect Australia’s ability to conduct national defence and ensure national security. [17]

In this context, significant means an event or incident that puts at risk public safety and confidence, threatens our economic security, harms Australia’s international competitiveness, or impedes the continuity of government and its services.

Queensland
Critical infrastructure: Infrastructure which, if destroyed, degraded or rendered unavailable for an extended period, will impact on social or economic well-being or affect national security or defence. [18]



Austria

Kritische Infrastrukturen sind jene Infrastrukturen oder Teile davon, die eine wesentliche Bedeutung für die Aufrechterhaltung wichtiger gesellschaftlicher Funktionen haben. Ihre Störung oder Zerstörung hat schwerwiegende Auswirkungen auf die Gesundheit, Sicherheit oder das wirtschaftliche und soziale Wohl der Bevölkerung oder die Funktionsweise von staatlichen Einrichtungen. [19]

Critical infrastructures are those infrastructures or parts thereof which are of crucial importance for ensuring important social functions. Their failure or destruction has severe effects on the health, security or the economic and social wellbeing of the population or the functioning of governmental institutions. [20]

Oftmals wird Kritische Infrastruktur auch mit der Abkürzung des aus dem Englischen entlehnten Substantiv CI (Critical Infrastructure) ausgedrückt. Im internationalen wie nationalen Sprachgebrauch hat sich auch CIP (Critical Infrastructure Protection) um den Schutz kritischer Infrastruktur auszudrücken, durchgesetzt. Konform dazu wird somit auch der Schutz der kritischen Informations Infrastruktur als CIIP (Critical Information Infrastructure Protection) bezeichnet.

Kritische Infrastruktur die in einem Mitgliedstaat gelegene Anlage, ein System oder ein Teil davon, die von wesentlicher Bedeutung für die Aufrechterhaltung wichtiger gesellschaftlicher Funktionen, der Gesundheit, der Sicherheit und des wirtschaftlichen oder sozialen Wohlergehens der Bevölkerung sind und deren Störung oder Zerstörung erhebliche Auswirkungen auf einen Mitgliedstaat hätte, da diese Funktionen nicht aufrechterhalten werden könnten. [21]



Barbados

Critical Infrastructure refers to systems, facilities, technologies, networks, assets and services essential to health, safety and security disruption. [22]



Belgium

Kritieke infrastructuur is een installatie, systeem of een deel daarvan, van federal belang, dat van essentieel belang is voor het behoud van vitale maatschappelijke functies, de gezondheid, de veiligheid, de beveiliging, de economische welvaart of het maatschappelijk welzijn, en waarvan de verstoring van de werking of de vernietiging een aanzienlijke weerslag zou hebben doordat die functies ontregeld zouden raken. [23]

Infrastructure critique: installation, système ou partie de celuici, d’intérêt fédéral, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’interruption du fonctionnement ou la destruction aurait une incidence significative du fait de la défaillance de ces fonctions. [24]

A critical infrastructure is an installation, system or part thereof, of federal interest, which is essential for the maintenance of vital societal functions, health, safety, security, economic or societal well-being of people, and which, if disrupted or destroyed, would have a significant impact. [25]



Kritieke infrastructuur: een voorziening, systeem of een deel daarvan op het grondgebied van de lidstaten dat van essentieel belang is voor het behoud van vitale maatschappelijke functies, de gezondheid, de veiligheid, de beveiliging, de economische welvaart of het maatschappelijk welzijn, waarvan de verstoring of vernietiging in een lidstaat aanzienlijke gevolgen zou hebben doordat die functies ontregeld zouden raken. [26]



Infrastructure critique: un point, système ou partie de celuici, situé dans les États membres, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’arrêt ou la destruction aurait un impact significatif dans un État membre du fait de la défaillance de ces fonctions. [27]



Belize

Critical infrastructure: Includes those sectors whose assets, systems, and networks, whether physical or virtual, are considered so vital that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof. [28]



Brazil

Infraestruturas Críticas: instalações, serviços, bens e sistemas que, se forem interrompidos ou destruídos, provocarão sério impacto social, econômico, político, internacional ou à segurança do Estado e da sociedade. [29]
Critical infrastructure are the installations, services or assets that if destroyed, disrupted or incapacitated will have a debilitating impact on security, the national economy, national public health and safety. [30]
Critical Infrastructures are considered as facilities, services, goods and systems that, if disrupted or destroyed, would bring serious economic, political or social impacts or risks to the security of the state and society. [31]



Bulgaria

Критична инфраструктура е система от съоръжения, услуги и информационни системи, чието спиране, неизправно функциониране или разрушаване би имало сериозно негативно въздействие върху здравето и безопасността на населението, околната среда, националното стопанство или върху ефективното функциониране на държавното управление.
(equals EU definition) [32] [33]



критична инфраструктура означава елемент, система или части от нея, намиращи се в държавите-членки, които са от основно значение за поддържането на жизненоважни обще¬ ствени функции, здравето, безопасността, сигурността, иконо¬ мическото или социалното благосъстояние на населението, и чието нарушаване или унищожаване би имало значителни последици в дадената държава-членка в резултат на невъз¬ можността да се запазят тези функции. [34]



Canada

Critical infrastructure refers to processes, systems, facilities, technologies, networks, assets and services essential to the health, safety, security or economic well-being of Canadians and the effective functioning of government.

Ensemble des processus, des systèmes, des installations, des technologies, des réseaux, des biens et des services nécessaires pour assurer la santé, la sûreté, la sécurité ou le bien-être économique des Canadiens ainsi que le fonctionnement efficace du gouvernement. [35]

Critical infrastructure can be stand-alone or interconnected and interdependent within and across provinces, territories and national borders. Disruptions of critical infrastructure could result in catastrophic loss of life, adverse economic effects, and significant harm to public confidence.

Colombia

Infraestructura crítica: Es el conjunto de computadores, sistemas computacionales, redes de telecomunicaciones, datos e información, cuya destrucción o interferencia puede debilitar o impactar en la seguridad de la economía, salud pública, o la combinación de ellas, en una nación. [36]

Critical Infrastructure is the set of computers, computer systems, telecommunication networks, data and information, the destruction or interference may weaken or impact the safety of the economy, public health, or combination thereof, of a nation (this defines the CII).

Costa Rica

Infraestructuras críticas: Sistemas y redes de información que en ocasión de fallo podrían tener un impacto serio en la salud, seguridad física y operacional, economía y el bienestar de los ciudadanos, o el efectivo funcionamiento del gobierno y la economía del país. [37]



Croatia

Kritične infrastrukture su sustavi, mreže i objekti od nacionalne važnosti čiji prekid djelovanja ili prekid isporuke roba ili usluga može imati ozbiljne posljedice na nacionalnu sigurnost, zdravlje i živote ljudi, imovinu i okoliš, sigurnost i ekonomsku stabilnost i neprekidno funkcioniranje vlasti. [38]

CI are the systems, networks and objects of national importance whose disruption in operation or interruption in the delivery of the goods can have serious consequences for national security, health and lives of people, property or environment, security and economic stability and continuous functioning of the government.



Kritična infrastruktura znači imovina, sustav ili njihov dio koji se nalazi u državama članicama i neophodan je za održavanje vitalnih društvenih funkcija, zdravlja, sigurnosti, zaštite, gospodarske i socijalne dobrobiti ljudi, čiji bi poremećaj rada ili čije bi uništenje, kao posljedica neuspjelog održavanja tih funkcija, moglo imati znatan učinak u državi članici. [39]



Cuba

Infraestructuras Críticas: Infraestructuras cuyo funcionamiento es indispensable y no permite soluciones alternativas, por lo que su interrupción o destrucción tendría un grave impacto sobre los servicios públicos esenciales o las estructuras gubernamentales. [40]



Cyprus

Ως «υποδομές ζωτικής σημασίας» νοούνται τα περιουσιακά στοιχεία, συστήματα ή μέρη αυτών τα οποία είναι ουσιώδη για τη διατήρηση των λειτουργιών ζωτικής σημασίας της κοινωνίας, της υγείας, της ασφάλειας, της οικονομικής και κοινωνικής ευημερίας των μελών της, και των οποίων η διακοπή λειτουργίας ή η καταστροφή θα είχε σημαντικό αντίκτυπο για τη Χώρα, ως αποτέλεσμα της αδυναμίας διατήρησης των λειτουργιών αυτών. [41] [42]

(equals the EU definition)



Czech Republic

Kritické infrastruktury: Systémy a služby, jejichž nefunkčnost nebo špatná funkčnost by měla závažný dopad na bezpečnost státu, jeho ekonomiku, veřejnou správu a v důsledku na zabezpečení základních životních potřeb obyvatelstva. [43]

Critical Infrastructure: Systems and services whose unfunctionality or wrong functionality would result in a serious impact on state security, its economy, public administration and in the end on provision of the basic daily needs of population. [44]


Kritickou infrastrukturou prostředky, systémy a jejich části nacházející se v členském státě, které jsou zásadní pro zachování nejdůležitějších společenských funkcí, zdraví, bezpeč¬ nosti, zabezpečení nebo dobrých hospodářských či sociálních podmínek obyvatel a jejichž narušení nebo zničení by mělo pro členský stát závažný dopad v důsledku selhání těchto funkcí. [45]



Denmark

Kritisk infrastruktur: aktiver, systemer eller dele deraf, der befinder sig i medlemsstaterne, og som er væsentlige for opretholdelsen af vitale samfundsmæssige funktioner og menneskers sundhed, sikkerhed og økonomiske eller sociale velfærd, og hvis afbrydelse eller ødelæggelse i væsentlig grad vil påvirke en medlemsstat som følge af, at disse funktioner ikke kan opretholdes. [46] [47]


Ecuador

INFRAESTRUCTURAS CRÍTICAS: Conjunto de instalaciones, redes, servicios, equipos físicos y tecnologías, cuya interrupción o destrucción tendría un impacto significativo en la seguridad, salud y bienestar de los ciudadanos, o en el eficaz funcionamiento de las instituciones del Estado y de las Administraciones Públicas. [48]



Estonia

Elutähtsad infrastruktuurid – ELi liikmesriikides asuv vara, süsteem või nende osa, mis on hädavajalikud eluliselt tähtsate ühiskondlike toimingute, tervishoiu, turvalisuse, julgeoleku, inimeste majandusliku ja sotsiaalse heaolu toimimiseks ning mille kahjustada saamine või hävimine mõjutaks nimetatud toimingute toimimishäire tulemusena oluliselt liikmesriiki. [49]



Ethiopia

Critical infrastructure means a computer system, network or data where any of the crimes stipulated under article 3 to 6 of this proclamation, is committed against it, would have a considerable damage on public safety and the national interest. [50]


Critical Infrastructure means an infrastructure that have considerable damage on public safety and the national interest, if attacked. [51]



Finland

Critical infrastructure refers to the structures and functions which are indispensable for the vital functions of society. They comprise physical facilities and structures as well as electronic functions and services. [52]


Kriittinen infrastruktuuri: perusrakenteet, palvelut ja niihin liittyvät toiminnot, jotka ovat välttämättömiä yhteiskunnan elintärkeiden toimintojen ylläpitämiseksi.

Critical infrastructure comprise basic structures and services and related functions which are essential to maintain the vital operations of society. -unofficial translation- [53]



Elintärkeällä infrastruktuurilla sellaisia jäsenvaltioissa sijaitsevia hyödykkeitä ja järjestelmiä tai niiden osia, jotka ovat keskeisiä yhteiskunnan välttämättömien toimintojen, terveydenhuollon, turvallisuuden, turvatoimien sekä väestön taloudellisen ja sosiaalisen hyvinvoinnin ylläpitämiseksi, ja joiden vahingoittumisella tai tuhoutumisella olisi merkittävä vaikutus jäsenvaltioon sen vuoksi, että näitä toimintoja ei kyetä ylläpitämään. [54]


Kriittinen infrastruktuuri (Critical Infrastructure, CI) käsittää ne rakenteet ja toiminnot, jotka ovat välttämättömiä yhteiskunnan jatkuvalle toiminnalle. Kriittiseen infrastruktuuriin kuuluu sekä fyysisiä laitoksia ja rakenteita että sähköisiä toimintoja ja palveluja. [55]

Critical Infrastructure (CI) comprises the structures and functions which are critical for the continuous functioning of society. [56]

Näiden turvaaminen tarkoittaa yksittäisten kriittisten kohtien löytämistä ja turvaamista, kuitenkin koko ajan infrastruktuurikokonaisuuden toimintaa silmällä pitäen (This involves physical facilities and structures as well as electronic functions and services; to guarantee these, specific critical points must be found and secured while at the same time paying close attention to the functioning of the infrastructural entity).

France

Vital infrastructure is any establishment, facility or structure for which the damage, unavailability or destruction as a result of a malicious action, a sabotage or terrorism action could directly or indirectly: if its activity is difficultly substitutable or replaceable, severely burden the war potential or economic potential, the national security or the survivability of the nation, or to seriously affect the population’s health or life.

The French original version is:

Point d’importance vitale (PIV): tout établissement, installation ou ouvrage dont le dommage ou l’indisponibilité ou la destruction par suite d’un acte de malveillance, de sabotage ou de terrorisme risquerait, directement ou indirectement: si son activité est difficilement substituable ou remplaçable, d’obérer gravement le potentiel de guerre ou économique, la sécurité ou la capacité de survie de la nation, ou de mettre gravement en cause la santé ou la vie de la population. [57]

The French government doesn’t use the notion of “criticality” but the notion of “vitality” with the meaning of essential service or infrastructure.

Infrastructure critique: un point, système ou partie de celuici, situé dans les États membres, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l’arrêt ou la destruction aurait un impact significatif dans un État membre du fait de la défaillance de ces fonctions. [58]


Critical infrastructures are institutions, structures or facilities that provide the essential goods and services forming the backbone of French society and its way of life. [59]


Gambia

National Critical infrastructure (NCI): Infrastructure and assets the loss or compromise of which could result in a major detrimental impact on national security, national defence, the functioning of the state or essential economic, safety, public health or other social services. [60]


Germany

Critical infrastructures (CI) are organizational and physical structures and facilities of such vital importance to a nation's society and economy that their failure or degradation would result in sustained supply shortages, significant disruptions of public safety and security, or other dramatic consequences. [61]

Kritische Infrastrukturen (KRITIS) sind Organisationen oder Einrichtungen mit wichtiger Bedeutung für das staatliche Gemeinwesen, bei deren Ausfall oder Beeinträchtigung nachhaltig wirkende Versorgungsengpässe, erhebliche Störungen der öffentlichen Sicherheit oder andere dramatische Folgen einträten. [62] [63]


The law about IT-security defines CI as:

Kritische Infrastrukturen (im Sinne dieses Gesetzes) sind Einrichtungen, Anlagen oder Teile davon, die (1) den Sektoren Energie, Informationstechnik und Telekommunikation, Transport und Verkehr, Gesundheit, Wasser, Ernährung sowie Finanz- und Versicherungswesen angehören und (2) von hoher Bedeutung für das Funktionieren des Gemeinwesens sind, weil durch ihren Ausfall oder ihre Beeinträchtigung erhebliche Versorgungsengpässe oder Gefährdungen für die öffentliche Sicherheit eintreten würden. [64]

(unofficial translation) Critical infrastructures (within the meaning of this law) are installations or facilities or parts thereof (1) in the Energy, ICT, Transport, Health, Water, Agriculture and Financial sectors and (2) that are key to the functioning of the society while their failure or degration result in serious service disruption or danger to the public security.



Kritische Infrastruktur die in einem Mitgliedstaat gelegene Anlage, ein System oder ein Teil davon, die von wesentlicher Bedeutung für die Aufrechterhaltung wichtiger gesellschaftlicher Funktionen, der Gesundheit, der Sicherheit und des wirtschaftlichen oder sozialen Wohlergehens der Bevölkerung sind und deren Störung oder Zerstörung erhebliche Auswirkungen auf einen Mitgliedstaat hätte, da diese Funktionen nicht aufrechterhalten werden könnten. [65] [66]



From a climate change adaptation point of view:

Critical infrastructures are organisations and facilities of great importance to the state, the failure or impairment of which would result in serious supply shortages, considerable disruption of public safety, or other dramatic consequences. [67]



Greece

Ως «υποδομές ζωτικής σημασίας» νοούνται τα περιουσιακά στοιχεία, συστήματα ή μέρη αυτών τα οποία είναι ουσιώδη για τη διατήρηση των λειτουργιών ζωτικής σημασίας της κοινωνίας, της υγείας, της ασφάλειας, της οικονομικής και κοινωνικής ευημερίας των μελών της, και των οποίων η διακοπή λειτουργίας ή η καταστροφή θα είχε σημαντικό αντίκτυπο για τη Χώρα, ως αποτέλεσμα της αδυναμίας διατήρησης των λειτουργιών αυτών. [68] [69]

(equals the EU definition)



Guatemala

Infraestructura Crítica: Aquellas instalaciones, bases de datos, redes, servicios y equipos físicos de tecnologías de la información necesarios para el funcionamiento normal de los servicios senciales, cuya interrupción o destrucción debida a causas naturales, técnicas o por ataques deliberados, tendría un impacto mayor en la vida, la salud, la seguridad, el flujo de suministros vitales, el bienestar económico y las garantías de las personas. [70]



Guinée

Infrastructures Critique: les installations physiques et des technologies de l'information et de communications notamment électroniques, les réseaux., les services et les actifs, qui en cas d'arrêt ou de destruction, peuvent avoir de graves incidences sur la santé, la sécurité ou le bien-êtrre social ou économique des citoyens, et/ou le functionnement correct ou continu des services de l'Etat. [71]



Hungary

Kritikus infrastruktúra: a tagállamokban található azon eszközök, rendszerek vagy ezek részei, amelyek elengedhetetlenek a létfontosságú társadalmi feladatok ellátásához, az egészségügyhöz, a biztonsághoz, az emberek gazdasági és szociális jólétéhez, valamint amelyek megzavarása vagy megsemmisítése e feladatok folyamatos ellátásának hiánya miatt jelentős következményekkel járna valamely tagállamban. [72] [73]



India

Critical infrastructure comprises those facilities, systems, or functions, whose incapacity or destruction would cause a debilitating impact on national security, governance, economy and social well-being of a nation. [74]



Indonesia

Infrastruktur kritis adalah aset, sistem, maupun jaringan, berbentuk fisik maupun virtual yang sangat vital, dimana gangguan terhadapnya berpotensi mengancam keamanan, kestabilan perekonomian nasional, keselamatan dan kesehatan masyarakat atau gabungan diantaranya. [75]



Ireland

Critical infrastructure means an asset, system or part thereof located in Member States which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions. [76]



Israel

Critical infrastructure is anything that would undermine stability in society and thus lead to threats to national security. It is emphasized that infrastructure is a system that combines various objects, links between them, and providing certain types of human activity. [77]


Italy

Infrastruttura critica (IC): infrastruttura, ubicata in uno Stato membro dell'Unione europea, che e' essenziale per il mantenimento delle funzioni vitali della societa', della salute, della sicurezza e del benessere economico e sociale della popolazione ed il cui danneggiamento o la cui distruzione avrebbe un impatto significativo in quello Stato, a causa dell'impossibilita' di mantenere tali funzioni. [78]


Infrastruttura critica un elemento, un sistema o parte di questo ubicato negli Stati membri che è essenziale per il mantenimento delle funzioni vitali della società, della salute, della sicurezza e del benessere economico e sociale dei cittadini ed il cui danneggiamento o la cui distruzione avrebbe un impatto significativo in uno Stato membro a causa dell’impossibilità di mantenere tali funzioni. [79]


Infrastruttura critiche: Sistemi, risorse e reti, e loro insiemi – sia fisici che virtuali – essenziali per lo svolgimento delle funzioni vitali di uno o più Stati. [80]


Infrastruttura critica: Sistema, risorsa, processo, assetto, anche virtuale, la cui distruzione, interruzione o anche parziale o momentanea indisponibilità ha l’effetto di indebolire in maniera significativa l'efficienza e il funzionamento normale di un Paese, ma anche la sicurezza e il sistema economico-finanziario e sociale, compresi gli apparati della Pubblica Amministrazione centrale e locale. [81]



Jamaica

Critical infrastructures include systems and assets, whether physical or virtual, so critical that the incapacitation or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination thereof. [82]

This may include water and sewage networks, agriculture, health systems, emergency services, information technology and telecommunications, banking and finance, energy (electrical and wind generated), transportation (air, road, port), postal and shipping entities.

Japan

重要インフラ - 他に代替することが著しく困難なサービスを提供する事業が形成する国民生活及び社会経済 活動の基盤であり、その機能が停止、低下又は利用不可能な状態に陥った場合に、我が国の国 民生活又は社会経済活動に多大なる影響を及ぼすおそれが生じるもので、重要インフラ分野 として指定する分野。[83]

Critical infrastructures are the backbone of national life and economic activities formed by businesses providing services that are extremely difficult to be substituted. [84]

If the function of the services is suspended, deteriorates or becomes unavailable, it could have a significant impact on the national life and economic activities.

カテゴリー : 機能をサイバーセキュリティ成果グループ別に細分化したものであ り、計画に基づいたニーズや特定の対策と密接に結びついている。 カテゴリーには、たとえば「資産管理」、「アクセス制御」、「検知プロ セス」がある。[85]

Critical infrastructures are the basis of people’s social lives and economic activities formed by businesses that provide services which are extremely difficult to be[86] substituted by others if its function is suspended, deteriorated or become unavailable, it could have significant impacts on people’s social lives and economic activities.



Kenya

Critical infrastructures describe assets that are essential for the functioning of a society and economy. (e.g., electrical grid, telecommunications, water supply). [87]



Kingdom of Saudi Arabia

Critical Infrastructure is defined as system and assets, whether physical or virtual, so vital to KSA that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. [88]



Kosovo

Infrastrukturë kritike është prona ose institucioni me rëndësi të madhe për të mirën publike, dështimi apo cenimi i të cilave do të qonte drejt tkurrjeve të qëndrueshme të furnizimit, çrregullimeve të konsiderueshme të sigurisë publike, apo pasoja të tjera dramatike. [89]

Critical infrastructures are assets or institutions with major importance for the public good, whose failure or damage would lead to sustainable supply bottlenecks, considerable disturbance of public security or other dramatic consequences. [90]



Latvia

Critical infrastructure is the objects, systems, or their parts in Latvia, which are important in providing the performance of functions essential to society, as well as for ensuring the protection of human health, security, economic or social welfare, whose destruction or malfunctioning may significantly influence the performance of state functions. [91]

The critical infrastructure of information technology is protected in order to ensure the performance of basic functions essential to the state and society.

Kritiskā infrastruktūra ir dalībvalstīs izvietoti objekti, sistēmas vai to daļas, kuras ir būtiskas, lai nodrošinātu svarīgu sabiedrības funkciju darbību, cilvēku veselības aizsardzību, drošumu, drošību, cilvēku ekonomisko vai sociālo labklājību, un kuru darbības traucējumi vai iznīcināšana būtiski ietekmētu attiecīgo dalībvalsti, jo tā nespētu turpmāk nodrošināt šo funkciju īstenošanu. [92]



Lithuania

Ypatingos svarbos infrastruktūros objektas – turtas, sistema ar jų dalis, esantys valstybėse narėse, kurie yra ypač svarbūs esminėms visuomeninėms funkcijoms, žmonių sveikatai, saugai, saugumui, ekonominei ar socialinei gerovei palaikyti, ir kurių veikimo sutrikdymas ar sunaikinimas, dėl šių funkcijų nepalaikymo turėtų didelį poveikį valstybei narei. [93]


Critical information infrastructure shall mean an electronic communications network, information system or a group of information systems where an incident that occurs causes or may cause grave damage to national security, national economy or social well-being. [94]



Luxembourg

Infrastructure critique: un point, système ou partie de celui-ci, situé dans les Etats membres de l'Union européenne, qui est indispensable au maintien des fonctions vitales de la société, de la santé, de la sûreté, de la sécurité et du bien-être économique ou social des citoyens, et dont l'arrêt ou la destruction aurait un impact significatif dans un Etat membre du fait de la défaillance de ces fonctions. [95] [96]



Malta

Critical infrastructure or CI means an asset, system or part thereof located in Malta which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions (equals the EU definition). [97]



Infrastruttura kritika tfisser assi, sistema jew parti minnhom li jinsabu fl-Istati Membri essenzjali għall-manteniment ta’ funzjonijiet vitali tas-soċjetà, is-saħħa, is-sigurtà, is-sikurezza, il-benessere ekonomiku jew soċjali tal-poplu u li t-tfixkil jew il-qerda tagħhom ikollu impatt sinifikanti fi Stat Membru bħala riżultat tal-falliment biex jinżammu dawk il-funzjonijiet. [98]



Mexico

Instalaciones Vitales (Infraestructura Crítica): Las estructuras físicas, instalaciones técnicas y sistemas principales que son social, económica u operativamente esenciales para el funcionamiento de una sociedad o comunidad, tanto en circunstancias habituales como extremas durante una emergencia. [99]



Moldova

Infrastructură critică – dispozitive, reţele, servicii, sisteme de bunuri materiale (energetice, de transport, de comunicaţii şi tehnologie a informaţiei, de furnizare a utilităţilor) de interes strategic şi/sau de utilitate publică, a căror distrugere, aducere în stare de nefuncţionare, degradare ori perturbare ar avea efecte negative majore, la nivel naţional sau regional, asupra stării de sănătate şi siguranţă a cetăţenilor, mediului, funcţionării economiei şi activităţii instituţiilor statului. [100]

{raw translation} Critical Infrastructure - Devices, networks, services, goods, systems (energy, transport, communications and information technology, of provision of utilities) of strategic and / or public utility interest their destruction, downtime, degradation or disturbance would have major national or regional negative effects on health and well-being of citizens' safety, the environment, the functioning of the economy and the work of the state institutions.



Montenegro

Kritična infrastruktura – se odnosi na imovinu, sisteme, usluge ili njihov dio, čijim bi se prekidom rada ili uništenjem, ugrozile ključne društvene funkcije: zdravlje, mir, bezbjednost, ekonomsko i socijalno blagostanje ili normalno funkcionisanje države. [101]

Critical infrastructure relates to property, systems, services, or part thereof, which would be an interruption of service or destruction, threaten key social functions: health, peace, security, economic and social well-being or the normal functioning of the state (equals the EU definition).


Netherlands

Vitale Infrastructuur zijn producten, diensten en de onderliggende processen die, als zij uitvallen, maatschappelijke ontwrichting kunnen veroorzaken. [102]

Critical infrastructures (Dutch: Vitale Infrastructuur) refers to products, services and the accompanying processes that, in the event of disruption or failure, could cause major social disturbance. [103]

"This could be in the form of tremendous casualties and severe economic damage, or in terms of an extremely lengthy recovery period and a lack of any readily available viable alternatives, while we depend on these products and services. Because the consequences of this critical infrastructure – or parts thereof – could be so dire for large segments of the Dutch population, extra attention must be given to its protection. Accordingly, this protection is designed to prevent disruption and concerns the protection against technical-organisational failings, overloading, and extreme natural phenomena or intentional or unintentional human action."(In Dutch: "Dat kan zijn omdat er sprake is van veel slachtoffers en grote economische schade, dan wel wanneer herstel zeer lang gaat duren en er geen reële alternatieven voorhanden zijn, terwijl deze producten en diensten niet gemist kunnen worden."

Since April 2015, The Netherlands recognises [104] two categories in criticality of critical infrastructure:
Category A: at least impact on one of the following four impact categories:

  1. economic impact: > 50.000 million euro costs and damages, or 5.0% decrease in real income
  2. physical impact: > 10.000 deaths, severely injured or chronically ill
  3. social-psychological impact: > 1 million persons are emotionally affected or experience serious societal survivability problems (fear, anger, disturbance)
  4. cascade impact: this disruption causes failure of minimal two other (critical) sectors

Category B: at least impact on one of the following three impact categories:

  1. economic impact: > 5.000 million euro costs and damages, or 1.0% decrease in real income
  2. physical impact: > 1.000 deaths, severely injured or chronically ill
  3. social-psychological impact: > 100.000 persons are emotionally affected or experience serious societal survivability problems

Kritieke infrastructuur: een voorziening, systeem of een deel daarvan op het grondgebied van de lidstaten dat van essentieel belang is voor het behoud van vitale maatschappelijke functies, de gezondheid, de veiligheid, de beveiliging, de economische welvaart of het maatschappelijk welzijn, waarvan de verstoring of vernietiging in een lidstaat aanzienlijke gevolgen zou hebben doordat die functies ontregeld zouden raken. [105]

Noot: In Nederland wordt de term Vitale Infrastructuur gebruikt.

General Security and Intelligence Service (AIVD)
Sectoren en delen van de infrastructuur die zo vitaal (van wezenlijk belang) zijn voor de Nederlandse samenleving dat uitval of ernstige verstoring ervan grote maatschappelijke schade tot gevolg kan hebben. [106]


New Zealand

Critical infrastructure/critical national infrastructure: Physical and digital assets, services, and supply chains, the disruption (loss, compromise) of which would severely impact the maintenance of national security, public safety, fundamental rights, and well-being of all New Zealanders. [107]


National Critical infrastructure is a term used by governments to describe assets that are essential for the functioning of a society and economy. [108]

For instance, electricity generation, gas production, telecommunications, water supply etc.

Norway

Kritisk infrastruktur er de anlegg og systemer som er helt nødvendige for å opprettholde samfunnets kritiske funksjoner som igjen dekker samfunnets grunnleggende behov og befolkningens trygghetsfølelse (NOU 6:2006, s. 31).

Critical infrastructure is the construction and systems essential to maintain society's critical features which covers society's basic needs and population's sense of security. [109]

Society’s functional ability is highly dependent on a number of physical and technical infrastructures. In the event of a failure in these infrastructures, society will be unable to maintain the supply of goods and services on which the population depends (cf. critical societal functions). These infrastructures can be described as critical to society. [110]

Pakistan

Critical Infrastructure includes the infrastructures so designated by any Government in Pakistan and such other assets, systems and networks, whether physical or virtual, so vital to the State or its organs including judicature that their incapacitation or destruction may have a debilitating effect on national security, economy, public health, safety or matters related thereto. [111]



Papua New Guinea

Critical Infrastructure refers to the basic facilities, services and installations needed for the functioning of a community, society or government, including but not limited to transportation, communication systems, water supply, electricity supply, banking services, public institutions including health services, post offices and education services. [112]


Paraguay

Infraestructura Crítica: las infraestructuras críticas consisten en sistemas y activos, físico o virtuales, esenciales para el mantenimiento de funciones sociales vitales, la salud, la integridad física, la seguridad, y el bienestar social y económico de la población, y cuya perturbación o destrucción tendría un impacto debilitante en la seguridad nacional, afectando gravemente al país. [113]



Philippines

Kritikal na imprastraktura ay tumutukoy sa mga computer system, at/o network, pisikal man o virtual, at/o mga programa sa computer, computer data at/o data ng trapiko na mahalaga sa bansang ito na ang pagkabaldado o pagkasira o panghihimasok sa mga ganuong sistema at mga asset ay magpapahina sa seguridad, pambansa o pang-ekonomiyang seguridad, pambansa’t pampublikong kalusugan at kaligtasan, o anumang kumbinasyon ng mga iyon. [114]


Critical infrastructure refers to the computer systems, and/or networks, whether physical or virtual, and/or the computer programs, computer data and/or traffic data so vital to this country that the incapacity or destruction of or interference with such system and assets would have a debilitating impact on security, national or economic security, national public health and safety, or any combination of those matters. [115]


Critical infrastructure are the assets, systems, and networks, whether physical or virtual, so vital to the state that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof. [116]


[actually defines Critical information infrastructure] Critical infrastructure refers to an electronic, magnetic, optical, electrochemical or data processing or communications device, or groupings of such devices, capable of performing logical, arithmetic, routing, or storage functions and which includes any storage facility or equipment or communications facility directly related to or operating in conjunction with such device. [117]

It covers any type of computer device including devices with data processing capabilities like mobile phones, smart phones, computer networks and other devices connected to the internet.

Poland

A critical infrastructure shall be understood as systems and mutually bound functional objects contained therein, including constructions, facilities, installations and services of key importance for the security of the state and its citizens, as well as serving to ensure efficient functioning of public administration authorities, institutions and enterprises. [118]


Infrastruktura krytyczna to systemy oraz wchodzące w ich skład powiązane ze sobą funkcjonalnie obiekty, w tym obiekty budowlane, urządzenia, instalacje, usługi kluczowe dla bezpieczeństwa państwa i jego obywateli oraz służące zapewnieniu sprawnego funkcjonowania administracji publicznej, a także instytucji i przedsiębiorców. [119]


Infrastruktura krytyczna oznacza składnik, system lub część infrastruktury zlokalizowane na terytorium państw członkowskich, które mają podstawowe znaczenie dla utrzymania niezbędnych funkcji społecznych, zdrowia, bezpieczeństwa, ochrony, dobrobytu materialnego lub społecznego ludności oraz których zakłócenie lub zniszczenie miałoby istotny wpływ na dane państwo członkowskie w wyniku utracenia tych funkcji. [120]



Portugal

Infra-estrutura crítica: a componente, sistema ou parte deste situado em território nacional que é essencial para a manutenção de funções vitais para a sociedade, a saúde, a segurança e o bem -estar económico ou social, e cuja perturbação ou destruição teria um impacto significativo, dada a impossibilidade de continuar a assegurar essas funções. [121]



Infra-estrutura crítica, o elemento, sistema ou parte deste situado nos Estados-Membros que é essencial para a manutenção de funções vitais para a sociedade, a saúde, a segurança e o bem-estar económico ou social, e cuja perturbação ou destruição teria um impacto significativo num Estado- -Membro, dada a impossibilidade de continuar a assegurar essas funções. [122]



Qatar

Physical assets, systems or installations, which if disrupted, compromised, or destroyed, would have a serious impact on the health, safety, security, or economic well-being of Qatar or the effective functioning of the Qatari government. [123] [124]



Republic of Trinidad & Tobago

Critical infrastructure means computer systems, devices, networks, computer programs, computer data, so vital to the country that the incapacity or destruction of or interference with such systems and assets would have a debilitating impact on security, defence or international relations of the State; or provision of services directly related to national or economic security, banking and financial services, communications infrastructure, national public health and safety, public transportation, public key infrastructure or any combination of those matters. [125]

Note: this actually is a definition of CII.

Romania

Infrastructură critică înseamnă un element, un sistem sau o componentă a acestuia, aflat pe teritoriul statelor membre, care este esențial pentru menținerea funcțiilor societale vitale, a sănătății, siguranței, securității, bunăstării sociale sau economice a persoanelor, șiacăror perturbare sau distrugere ar avea un impact semnificativ într-un stat membru ca urmare a incapacității de a menține respectivele funcții. [126]



Russian Federation

критически важный объект инфраструктуры Российской Федерации (далее - критически важный объект) - объект, нарушение (или прекращение) функционирования которого приводит к потере управления, разрушению инфраструктуры, необратимому негативному изменению (или разрушению) экономики страны, субъекта Российской Федерации либо административно- территориальной единицы или существенному ухудшению безопасности жизнедеятельности населения, проживающего на этих территориях, на длительный срок.

Critical infrastructure of the Russian Federation is an object the violation (or termination) of operation thereof leads to a loss of control, destruction of infrastructure, irreversible negative changes (or failure) of the economy, a subject of the Russian Federation or administrative-territorial units or a significant deterioration in health and safety of people living in these areas, for the long term. [127]


Critical Information Infrastructure: is a combination of automated systems of critical facilities control and information telecommunication networks providing for the interaction thereof, designed for the performing of the tasks related to governmental administration, ensuring the defensive capability, security, law and order, the irregularity in the functioning (or malfunction) of which may be the cause of grave consequences. [128]



Slovakia

Kritická infraštruktúra definovaná ako tá časť národnej infraštruktúry (vybrané organizácie a inštitúcie, objekty, sústavy, zariadenia, služby a systémy), ktorej zničenie alebo znefunkčnenie v dôsledku pôsobenia rizikového faktora spôsobí ohrozenie alebo narušenie politického a hospodárskeho chodu štátu alebo ohrozenie života a zdravia obyvateľstva. [129]



Kritická infraštruktúra je zložka, systém alebo ich časť nachádzajúca sa v členských štátoch, ktorá je nevyhnutná pre zachovanie základných funkcií spoločnosti, zdravia, ochrany, bezpečnosti, kvality života obyvateľov z ekonomického a sociálneho hľadiska, a ktorej narušenie alebo zničenie by malo závažné dôsledky v členskom štáte z dôvodu nemožnosti zachovať tieto funkcie. [130]


Kritická infraštruktúra: Najmä objekty osobitnej dôležitosti, ďalšie dôležité objekty, vybrané informačné a komunikačné prostriedky, zariadenia na výrobu a zásobovanie vodou, elektrickou energiou, ropou a zemným plynom a ďalšie časti majetku štátu a podnikateľských právnických a fyzických osôb určené vládou SR alebo iným kompetentným orgánom štátnej správy, ktoré sú nevyhnutné na zvládnutie krízových situácií, ochranu obyvateľstva a majetku, na zaistenie minimálneho chodu ekonomiky a správy štátu, ako aj jeho vonkajšej a vnútornej bezpečnosti a ktoré treba špeciálne ochraňovať. Sú to zariadenia, služby a informačné systémy životne dôležité pre obyvateľov a riadenie štátu, ktorých nefunkčnosť alebo zničenie môže ohroziť bezpečnostné záujmy štátu. [131]



Slovenia

Kritična infrastruktura državnega pomena v Republiki Sloveniji obsega tiste zmogljivosti in storitve, ki so ključnega pomena za državo in bi prekinitev njihovega delovanja ali njihovo uničenje pomembno vplivalo in imelo resne posledice na nacionalno varnost, gospodarstvo, ključne družbene funkcije, zdravje, varnost in zaščito ter družbeno blaginjo. [132]
(equals the EU definition)



Kritična infrastruktura pomeni infrastrukturno zmogljivost, sistem ali njun del, ki se nahaja v državah članicah in je bistven za vzdrževanje ključnih družbenih funkcij, zdravja, varnosti, zaščite, gospodarske in družbene blaginje ljudi ter katerih okvara ali uničenje bi imelo v državi članici resne posledice zaradi nezmožnosti vzdrževanja teh funkcij. [133]



South Africa

‘‘iziseko ezibalulekileyo ezingundoqo’’ zizo naziphi na iziseko ezibhengezwe njengezibalulekileyo ngokwesiqendu 20(1) kwaye ziquka udederhu lweziseko ezibalulekileyo ezingundoqo apho okubhaliweyo kubonisa oko;
‘‘udederhu lweziseko ezibalulekileyo ezingundoqo’’ ziziseko ezibalulekileyo ezingundoqo eziliqela zidityanisiwe ngezizathu ezivakalayo, ngokwesiqendu 20(1)(c);

‘‘critical infrastructure’’ means any infrastructure which is declared as such in terms of section 20(1) and includes a critical infrastructure complex where required by the context. [134]

‘‘critical infrastructure complex’’ means more than one critical infrastructure grouped together for practical or administrative reasons, which is determined as such in terms of section 20(1)(c).

"critical infrastructure" means any infrastructure or infrastructure complex which is declared as such in terms of section 20(4). [135]



Spain

Critical infrastructures are strategic infrastructures (that is, those that supply essential services) the functioning of which is necessary and does not allow alternative solutions, reason why their disruption or destruction would have serious impact on essential services. [136]


Infraestructura crítica, el elemento, sistema o parte de este situado en los Estados miembros que es esencial para el mantenimiento de funciones sociales vitales, la salud, la integridad física, la seguridad, y el bienestar social y económico de la población y cuya perturbación o destrucción afectaría gravemente a un Estado miembro al no poder mantener esas funciones. [137]


Infraestructuras críticas: las infraestructuras estratégicas cuyo funcionamiento es indispensable y no permite soluciones alternativas, por lo que su perturbación o destrucción tendría un grave impacto sobre los servicios esenciales.

CIs are strategic infrastructures (facilities, networks, systems and physical and IT equipment on which operation of the essential services rests, whose operation is indispensable) and where alternative solutions are not possible so that their disruption or destruction would seriously impact essential services. [138]


Infraestructuras críticas (IC): Las infraestructuras estratégicas cuyo funcionamiento es indispensable y no permite soluciones alternativas, por lo que su interrupción o destrucción tendría un grave impacto sobre los servicios públicos esenciales. [139]



Sweden

Samhällsviktig verksamhet (essential services): Med samhällsviktig verksamhet avses en verksamhet som uppfyller minst ett av följande villkor: (1) Ett bortfall av, eller en svår störning i verksamheten som ensamt eller tillsammans med motsvarande händelser i andra verksamheter på kort tid kan leda till att en allvarlig kris inträffar i samhället (2) Verksamheten är nödvändig eller mycket väsentlig för att en redan inträffad kris i samhället ska kunna hanteras så att skadeverkningarna blir så små som möjligt. [140]
(this equals the EU definition) [141]



Kritisk infrastruktur: anläggningar, system eller delar av dessa belägna i medlemsstaterna som är nödvändiga för att upprätthålla centrala samhällsfunktioner, hälsa, säkerhet, trygghet och människors ekonomiska eller sociala välfärd och där driftsstörning eller förstörelse av dessa skulle få betydande konsekvenser i en medlemsstat till följd av att man inte lyckas upprätthålla dessa funktioner. [142]



Switzerland

Critical infrastructures: Processes, systems and facilities that are essential for the functioning of the economy and the welfare of the population. [143]

Kritische Infrastrukturen: Prozesse, Systeme und Einrichtungen, die essenziell für das Funktionieren der Wirtschaft bzw. das Wohlergehen der Bevölkerung sind. [144]

Infrastructures critiques: Processus, systèmes et installations nécessaires au fonctionnement de l’économie et au bien-être de la population. [145]

Infrastrutture critiche: Processi, sistemi e dispositivi essenziali per il funzionamento dell’economia e il benessere della popolazione.[146]


Critical infrastructure refers to infrastructure whose disruption, failure or destruction would have serious implications for society, the private sector and the state. [147]

Kritische Infrastrukturen sind Infrastrukturen, deren Störung, Ausfall oder Zerstörung gravierende Auswirkungen auf das Funktionieren der Gesellschaft, der Wirtschaft und des Staates haben. [148]

Infrastructures critiques (IC): Il s’agit d’infrastructures dont le dérangement, la défaillance ou la destruction peut avoir des conséquences graves pour la société, l’économie et les pouvoirs publics. [149]

Le infrastrutture critiche sono quelle il cui mancato funzionamento a causa di perturbazioni, guasti o distruzione hanno gravi ripercussioni sulla società, sull’economia e sullo Stato. [150]



Turkey

Kritik altyapılar: İşlediği bilgi/verinin gizliliği, bütünlüğü veya erişilebilirliği bozulduğunda, (a) Can kaybına, (b) Büyük ölçekli ekonomik zarara, (c) Ulusal güvenlik açıklarına veya kamu düzeninin bozulmasına yol açabilecek bilişim sistemlerini barındıran altyapıları. [151]

Critical infrastructures: Infrastructures that contain information systems, which may cause (a) Loss of life, (b) Large scale economic loss, and (c) National security vulnerabilities or disturbance of public order, when the confidentiality,integrity or availability of the data they contain is compromised. [152]

(definitions point more to CII than CI)

Kritik altyapılar: İşlediği bilgi/verinin gizliliği, bütünlüğü veya erişilebilirliği bozulduğunda: (a) Can kaybına, (b) Büyük ölçekli ekonomik zarara, (c) Ulusal güvenlik açıklarına veya kamu düzeninin bozulmasına yol açabilecek bilişim sistemlerini barındıran altyapıları. [153]

(definition points more to CII than CI)

Uganda

Uganda uses the aformentioned ITU-T definition. [154]



Ukraine

критично важливі об’єкти інфраструктури (далі - об’єкти критичної інфраструктури) - підприємства, установи та організації незалежно від форми власності, діяльність яких безпосередньо пов’язана з технологічними процесами та/або наданням послуг, що мають велике значення для економіки та промисловості, функціонування суспільства та безпеки населення, виведення з ладу або порушення функціонування яких може справити негативний вплив на стан національної безпеки і оборони України, навколишнього природного середовища, заподіяти майнову шкоду та/або становити загрозу для життя і здоров’я людей.

{machine translation} critical infrastructure objects - enterprises, institutions and organizations irrespective of the form of ownership, whose activities are directly related to the technological processes and / or the provision of services of great importance to the economy and industry, functioning of the society and the safety of the population, the failure or malfunctioning of which may have a negative impact on the state of national security and defense of Ukraine, the environment, to cause a property shock do and / or pose a threat to life and health. [155]



United Kingdom (UK)

The United Kingdom (UK) defines national infrastructure as:

those facilities, systems, sites and networks necessary for the functioning of the country and the delivery of the essential services upon which daily life in the UK depends. [156]

In the approach of the UK, infrastructure is categorised according to its value or “criticality” and the impact of its loss. This categorisation is done using the Government “Criticality Scale”, which assigns categories for different degrees of severity of impact.

Not everything within a national infrastructure sector is “critical”. Within the sectors there are certain “critical” elements of infrastructure, the loss or compromise of which would have a major detrimental impact on the availability or integrity of essential services, leading to severe economic or social consequences or to loss of life. These “critical” assets make up the nation's critical national infrastructure (CNI) and are referred to individually as “infrastructure assets”. Infrastructure assets may be physical (e.g. sites, installations, pieces of equipment) or logical (e.g. information networks, systems).

Critical infrastructure means an asset, system or part thereof located in Member States which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions. [157]


Critical Infrastructure (CI): A term used to describe Critical National Infrastructure and other infrastructure of national significance as well as infrastructure and assets of local significance. [158]


Critical Infrastructure: Critical infrastructure is therefore a broad term used to describe Critical National Infrastructure (CNI) and other infrastructure of national significance, as well as infrastructure and assets of local significance. [159]



United States

Patriot Act
Systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. [160]


DoD
Critical infrastructure and key resources (CI/KR) — The infrastructure and assets vital to a nation’s security, governance, public health and safety, economy, and public confidence (source: JP 3-27). [161]


Defense critical infrastructure (DCI): Department of Defense and non-Department of Defense networked assets and facilities essential to project, support, and sustain military forces and operations worldwide. (JP 3-27). [162]


NIST
CI: System and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. [163]


CI: Essential services and related assets that underpin American society and serve as the backbone of the nation's economy, security, and health. [164]



Virgin Islands

Critical infrastructure is comprised of those assets essential for the functioning of a society and economy. [165]



Standard Definition

ISO/IEC TR 27019:2013

Organizations and facilities that are essential for the functioning of society and the economy as a whole. [166]

The standard notes that a failure or malfunction of such organizations and facilities would result in sustained supply shortfalls, make a significant impact on public security and have other wide ranging impacts.

IETF

Critical Information Infrastructure: Those systems that are so vital to a nation that their incapacity or destruction would have a debilitating effect on national security, the economy, or public health and safety. [167]


Other Definitions

International Risk Governance Council (IRCG)

Critical infrastructures are the systems and facilities by which essential services are supplied. [168]

The standard notes that a failure or malfunction of such organizations and facilities would result in sustained supply shortfalls, make a significant impact on public security and have other wide ranging impacts.

NATO's CCD-CoE

Critical Infrastructure is defined as physical or virtual systems and assets under the jurisdiction of a State that are so vital that their incapacitation or destruction may debilitate a State’s security, economy, public health  or safety, or the environment. [169]



Ontario (Canada)

Critical Infrastructure (CI): interdependent, interactive, interconnected networks of institutions, services, systems and processes that meet vital human needs, sustain the economy, protect public safety and security, and maintain continuity of and confidence in government. [170]

Infrastructure essentielle: réseaux interdépendants, interactifs et interconnectés d’institutions, de services, de systèmes et de processus qui répondent aux besoins vitaux des êtres humains, soutiennent l’économie, protègent la sécurité publique, assurent la continuité des services gouvernementaux et maintiennent la confiance du public envers le gouvernement. [170]


See also

History

European Council COM(2006)787

Those assets or parts thereof which are essential for the maintenance of critical societal functions, including the supply chain, health, safety, security, economic or social well-being of people. [171]

Notes

  1. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  2. European Court of Auditors, Challenges to effective EU cybersecurity policy, Briefing Paper, March 2019
  3. https://www.cisa.gov/sites/default/files/publications/critical-five-shared-narrative-critical-infrastructure-2014-508.pdf Forging a Common Understanding for Critical Infrastructure (2014)
  4. ITU Study Group Q.22/1 Report on Best Practices for a National Approach to Cybersecurity: A Management Framework for Organizing National Cybersecurity Efforts, ITU-D Secretariat, Geneva (2008).
  5. Tallinn Manual on the International Law Applicable to Cyber Warfare (2013)
  6. NATO EAPC(SCEPC) lexicon and CRITICAL TELECOMMUNICATION INFRASTRUCTURE PROTECTION - document - EAPC(CCPC)D(2002)8-REV1 (26 January 2004)
  7. 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.
  8. UNISDR glossary in French
  9. UNISDR glossary in Russian
  10. UNISDR glossary in Spanish
  11. UNISDR glossary in Arabian
  12. UNISDR glossary in Bahasa
  13. UNISDR glossary in Malay
  14. UNISDR glossary in Tagalog
  15. 2009 UNDRR Terminology on Disaster Risk Reduction in Chinese
  16. SUBSECRETARÍA DE PROTECCIÓN CIVIL Y ABORDAJE INTEGRAL DE EMERGENCIAS Y CATÁSTROFES (1/2015)
  17. Critical Infrastructure Resilience Strategy, 2010
  18. Queensland Glossary of terms
  19. Österreichische Strategie für Cyber Sicherheit (2013)
  20. Austrian Cyber Security Strategy, Federal Chancellery of the Republic of Austria, Vienna (2013)
  21. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  22. Emergency Procedures: From Plan to Practice
  23. N. 2011 — 1799 C − 2011/00399 1 JULI 2011. — Wet betreffende de beveiliging en de bescherming van de kritieke infrastructure
  24. N. 2011 — 1799 [ − 2011/00399 1er JUILLET 2011. — Loi relative à la sécurité et la protection des infrastructures critiques
  25. Service Public Fédéral Intérieur/Federale Overheidsdienst Binnenlandse Zaken F./N. 2011-1799; C-2011/00399 (2011)
  26. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  27. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  28. National Cybersecurity Strategy - Towards A Secure Cyberspace 2020-2023 (2020)
  29. GUIA DE REFERÊNCIA PARA A SEGURANÇA DAS INFRAESTRUTURAS CRÍTICAS DA INFORMAÇÃO Versão 01 (Nov. 2010)/ Portaria Nº 45, de 8 de setembro de 2009. Gabinete de Segurança Institucional da Presidência da República.
  30. Emilio Tissato Nakamura, Jadir Antonio da Silva, José Manuel Martin Rios et al., Mobile Telecommunications Networks for the 2014 World Cup, GSM Association (2011)
  31. Presentation on Ordinance No. 2, of February 2008, the Cabinet of Institutional Security of the Presidency (GSI/PR)
  32. Critical Infrastructure in the Energy Sector (Min. of Energy)
  33. „Кибер устойчива България 2020” - Republic of Bulgaria: national cyber security strategy "Cyber Resilient Bulgaria 2020"(2016)
  34. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  35. An Emergency Management Framework for Canada (Second Edition)
  36. Conpes 3510 (Resolución CRC 2258 de 2009)
  37. Estrategia Nacional de Ciberseguridad de Costa Rica (2017)
  38. Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)
  39. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  40. Glossary of Cyber terms/Glosario de términos, Centro de Seguridad del Ciberespacio
  41. Οδηγία 2008/114/ΕΚ του Συμβουλίου, της 8ης Δεκεμβρίου 2008, σχετικά με τον προσδιορισμό και τον χαρακτηρισμό των ευρωπαϊκών υποδομών ζωτικής σημασίας και σχετικά με την αξιολόγηση της ανάγκης βελτίωσης της προστασίας τους
  42. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection - EL
  43. http://www.govcert.cz/download/nodeid-561 Výkladový slovník kybernetické bezpečnosti (2013)
  44. Act No. 181 of 23 July 2014 On Cyber Security and Change of Related Acts (Act on Cyber Security)
  45. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  46. Bekendtgørelse om identifikation og udpegning af europæisk kritisk infrastruktur på energiområdet og vurdering af behovet for bedre beskyttelse (EPCIP-direktivet)
  47. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  48. AGENDA DE INVESTIGACIÓN, DESARROLLO TECNOLÓGICO E INNOVACIÓN PARA EL SECTOR DEFENSA 2014 - 2017
  49. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  50. DRAFT A PROCLAMATION TO PROVIDE FOR THE COMPUTER CRIME, Ethiopia
  51. Federal Nagarit Gazette Ethiopia, 2 Jan, 2014
  52. Finlands' Cyber Security Strategy (2013)
  53. Vocabulary of Comprehensive Security. Helsinki (TSK 47) (2014)
  54. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  55. Yhteikunnan Turvallisuusstrategia, Valtioneuvoston periaatepäätös 16.12.2010
  56. Security Strategy for Society, Government Resolution 16.12.2010
  57. INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J
  58. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  59. THE CRITICAL INFRASTRUCTURE PROTECTION IN FRANCE - factsheet SGDN (2017)
  60. THE GAMBIA NATIONAL CYBERSECURITY STRATEGY (2019)
  61. National Strategy for Critical Infrastructure Protection(CIP Strategy), BMI 17 June 2009.
  62. Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)), BMI 17 June 2009.
  63. DRAFT Cyber-Sicherheitsstrategie für Deutschland 2021
  64. Entwurf eines Gesetzes zur Erhöhung der Sicherheit informationstechnischer Systeme (IT-Sicherheitsgesetz), Deutsche Bundcestag Drucksache 18/4096 (June, 2015))
  65. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  66. DRAFT Cyber-Sicherheitsstrategie für Deutschland 2021
  67. Combating Climate Change: The German Adaptation Strategy
  68. Προεδρικό Διάταγμα 39/2011 της Ελληνικής Δημοκρατίας που αφορά την προσαρμογή της ελληνικής νομοθεσίας προς τις διατάξεις τις οδηγίας 2008/114/ΕΚ του Συμβουλίου της Ευρωπαϊκής Ένωσης.
  69. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  70. La Estrategia Nacional de Seguridad Cibernética (June 2018)
  71. Loi relative à la cybersecurité et protection des données à caractère personnel en République de Guinée, L/2016/037
  72. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  73. Act No.CLXVI of 2012 on the identification, designation and protection of essential systems and facilities.
  74. workshop presentation by the NATIONAL CRITICAL INFORMATION INFRASTRUCTURE PROTECTION CENTRE (NCIIPC), 2015
  75. PERATURAN MENTERI PERTAHANAN REPUBLIK INDONESIA NOMOR 82 TAHUN 2014
  76. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  77. from blog on machine learning
  78. DECRETO LEGISLATIVO 11 aprile 2011 , n. 61 Attuazione della Direttiva 2008/114/CE recante l'individuazione e la designazione delle infrastrutture critiche europee e la valutazione della necessita' di migliorarne la protezione. (11G0101
  79. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  80. IL LINGUAGGIO DEGLI ORGANISMI INFORMATIVI Glossario (2013)
  81. Protezione Civile Glossario
  82. Jamaica's National Cyber Security Strategy
  83. 重要インフラの情報セキュリティ対策に係る 第4次行動計画
  84. The Cybersecurity Policy for Critical Infrastructure Protection (4th Edition) (Tentative Translation)
  85. 重要インフラのサイバーセキュリティを 向上させるためのフレームワーク (2014)
  86. The Information Security Policy Council, The Second Action Plan on Information Security Measures for Critical Infrastructures, Japan (2009)
  87. Kenya's National Cyber Security Strategy
  88. Developing National Information Security Strategy for the Kingdom of Saudi Arabia NISS draft 7
  89. Strategjia Shtetërore për Sigurinë Kibernetike dhe Plani i Veprimit 2016 – 2019
  90. National Cyber Security Strategy and Action Plan 2016 – 2019 (2016)
  91. CYBER SECURITY STRATEGY OF LATVIA 2014–2018
  92. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  93. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  94. Programme for the Development of Electronic Information Security (Cyber-Security) for 2011-2019, Government of the Republic of Lithuania (2011)
  95. Règlement grand-ducal du 12 mars 2012 portant application de la directive 2008/114/CE du Conseil du 8 décembre 2008
  96. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  97. CRITICAL INFRASTRUCTURES AND EUROPEAN CRITICAL INFRASTRUCTURES (IDENTIFICATION, DESIGNATION AND PROTECTION) ORDER, SUBSIDIARY LEGISLATION 460.24, 8th November, 2011.
  98. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  99. El Glosario Centro Nacional de prevencion de desastres (CENAPRED)
  100. Strategia naţională de apărare 2017
  101. Strategija o bezbjednosti 2013-2017 (2012)
  102. De Nationaal Coördinator Terrorismebestrijding (2004)
  103. Bijlage bij Kamerstuk 26643 nr. 75 Rapportage Bescherming Vitale Infrastructuur
  104. https://www.nctv.nl/actueel/nieuws/kabinet-versterkt-crisisbeheersing.aspx?cp=126&cs=59950 Voortgangsbrief nationale veiligheid 9 april 2015
  105. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  106. General Security and Intelligence Service
  107. New Zealand’s Cyber Security Strategy (2019)
  108. New Zealand’s Cyber Security Strategy (2011)
  109. VEILEDNING Sikkerhet i kritisk infrastruktur og kritiske samfunnsfunksjoner – modell for overordnet risikostyring
  110. Cyber Security Strategy for Norway (2012)
  111. Government Proposed And Modified Cybercrime Bill 2015 approved by National Assembly, May 2016
  112. Papua New Guinea Criminal code act 2016
  113. Plan Nacional de Ciberseguridad, República del Paraguay, 2016
  114. Cybercrime Prevention Act of 2012 (Pinoy Version) Philippines
  115. Republic Act No. 10175, 2012
  116. DND GLOSSARY OF CYBER SECURITY TERMS (v.4)
  117. National Cyber Security Plan 2022 (May 2017)
  118. Polish Government Centre for Security (2013)
  119. INFRASTRUKTURA KRYTYCZNA webpage
  120. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  121. Decreto-Lei n.º 62/2011 de 9 de Maio (2011)
  122. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  123. QATAR National Cyber Security Strategy (May 2014)
  124. الاستراتيجية الوطنية للأمن السيبراني QATAR NCSS - Arabic version (May 2014)
  125. Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)
  126. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  127. NATIONAL SECURITY OF RUSSIA - Information security (February 3, 2012, № 803)
  128. Principal Guidelines of the Governmental Policy, Russia (2012)
  129. Národný program pre ochranu a obranu kritickej infraštruktúry v Slovenskej republike
  130. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  131. BEZPEČNOSTNÁ RADA SLOVENSKEJ REPUBLIKY
  132. Zascita_kriticne_infrastrukture
  133. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection
  134. Act No. 8 of 2019: Critical Infrastructure Protection Act, 2019
  135. CIP Bill for publication 2015
  136. CNPIC
  137. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  138. [http://www.cnpic.es/Biblioteca/Legislacion/Generico/Ley_8-2011_PIC.pdf 7630 Ley 8/2011, de 28 de abril, por la que se establecen medidas para la protección de las infraestructuras críticas.
  139. CIBERSEGURIDAD. RETOS Y AMENAZAS A LA SEGURIDAD NACIONAL EN EL CIBERESPACIO, MINISTERIO DE DEFENSA (2010)
  140. Handlingsplan för skydd av samhällsviktig verksamhet, Swedish Civil Contingencies Agency (MSB) (2014)
  141. Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure, Swedish Civil Contingencies Agency (MSB) (2014)
  142. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  143. SN002 - National strategy for Switzerland’s protection against cyber risks (NCS) 2018-2022 (2018)
  144. SN002 - Nationale Strategie zum Schutz der Schweiz vor Cyber-Risiken (NCS) 2018-2022 (2018)
  145. SN002 - Stratégie nationale de protection de la Suisse contre les cyberrisques (SNPC) 2018-2022 (2018)
  146. SN002 - Strategia nazionale per la protezione della Svizzera contro i cyber-rischi (SNPC) 2018-2022 (2018)
  147. National strategy for the protection of Switzerland against cyber risks (2012)
  148. Leitfaden Schutz kritischer Infrastrukturen 2015
  149. Guide pour la protection des infrastructures critiques 2015/Glossaire des risques, Office fédéral de la protection de la population, 29.4.2013
  150. Glossario sui rischi, 29.4.2013
  151. 2016-2019 UlUSAL SİBER GÜVENLİk STRATEJİSİ (Sept. 2016)
  152. Turkey's National Cyber Security Strategy 2016-2019 (2016)
  153. 2016-2019 ULUSAL SİBER GÜVENLİK STRATEJİSİ
  154. National Information Security Policy (2011)
  155. ЗАКОН УКРАЇНИ - Про основні засади забезпечення кібербезпеки України / THE LAW OF UKRAINE: About the basic principles of providing cyber security of Ukraine 2163-19
  156. Centre for the Protection of National Infrastructure (CPNI)
  157. Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  158. Cabinet Office, Glossary - Revision to Emergency Preparedness 2011
  159. UK Civil Protection Lexicon 2013
  160. §1016(e) of the United States Patriot Act of 2001 (42 U.S.C. §5195c(e))
  161. Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)
  162. Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms (2016)
  163. NIST Glossary/ NIST SP 800-30 / CNSSI 4009-2015
  164. NIST Glossary/ NISTIR 8183
  165. The Virgin Islands Climate Change Green Paper Prepared by the Conservation and Fisheries Department, Ministry of Natural Resources and Labour (2010)
  166. ISO/IEC TR 27019:2013 Information technology -- Security techniques -- Information security management guidelines based on ISO/IEC 27002 for process control systems specific to the energy utility industry.
  167. IETF RFC449 Internet Security Glossary 2
  168. IRCG webpage on CI
  169. Tallinn Manual on the International Law Applicable to Cyber Warfare - 2013, CCD-CoE, Tallinn, Estonia
  170. 170.0 170.1 Province of Ontario’s Emergency Management Glossary of Terms
  171. EC COM(2006) 787 final, Directive of the Council on the identification and designation of European Critical Infrastructure and the assessment of the need to improve their protection, EC, Brussels 12.12.2006.