Difference between revisions of "Critical Infrastructure"
(→USA) |
(→ISO/IEC TR 27019:2013) |
||
| Line 19: | Line 19: | ||
==== ISO/IEC TR 27019:2013 ==== | ==== ISO/IEC TR 27019:2013 ==== | ||
| − | Organizations and facilities that are essential for the functioning of society and the economy as a whole <ref>[http://www.iso.org/iso/home/store/catalogue_tc/catalogue_detail.htm?csnumber=43759 ISO/IEC TR 27019:2013 Information technology -- Security techniques -- Information security management guidelines based on ISO/IEC 27002 for process control systems specific to the energy utility industry.]</ref>. The standard notes that a [[failure]] or malfunction of such organizations and facilities would result in sustained supply shortfalls, make a significant [[impact]] on public | + | Organizations and facilities that are essential for the functioning of society and the economy as a whole <ref>[http://www.iso.org/iso/home/store/catalogue_tc/catalogue_detail.htm?csnumber=43759 ISO/IEC TR 27019:2013 Information technology -- Security techniques -- Information security management guidelines based on ISO/IEC 27002 for process control systems specific to the energy utility industry.]</ref>. The standard notes that a [[failure]] or malfunction of such organizations and facilities would result in sustained supply shortfalls, make a significant [[impact]] on public security and have other wide ranging [[impact|impacts]]. |
==See also== | ==See also== | ||
Revision as of 14:14, 21 May 2014
While there is not a commonly accepted definition of critical infrastructure, all definitions emphasize the contributing role of a critical infrastructure to the society or the debilitating effect in the case of disruption. Another common characteristic is that they are complex in their structure, which makes the issue of dependencies an important topic.
Contents
Definitions
Official European Definition
An asset, system or part thereof located in Member States which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions [1]
National Definitions
USA
Systems and assets, whether physical or virtual, so vital services to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters. [2]
Germany
Critical infrastructures are organisations and facilities of major importance for society whose failure or impairment would cause a sustained shortage of supplies, significant disruptions to public order, safety and security or other dramatic consequences [3].
Standard Definition
ISO/IEC TR 27019:2013
Organizations and facilities that are essential for the functioning of society and the economy as a whole [4]. The standard notes that a failure or malfunction of such organizations and facilities would result in sustained supply shortfalls, make a significant impact on public security and have other wide ranging impacts.
See also
- European Critical Infrastructure (ECI)
- Critical Infrastructure Protection
- Critical Infrastructure Sector
Notes
- ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
- ↑ §1016(e) of the USA Patriot Act of 2001 (42 U.S.C. §5195c(e))
- ↑ Unpublished working glossary of UP KRITIS and BSI, 2014
- ↑ ISO/IEC TR 27019:2013 Information technology -- Security techniques -- Information security management guidelines based on ISO/IEC 27002 for process control systems specific to the energy utility industry.
