Difference between revisions of "Critical Infrastructure Sector"

From CIPedia
Jump to navigation Jump to search
(→‎Notes)
(→‎Brazil)
(105 intermediate revisions by 2 users not shown)
Line 1: Line 1:
−
<big>Each national or international strategy and policy identifies different categories of sectors that are considered to offer [[Vital Services|vital services]] and thus require [[Critical Infrastructure Protection|protection]]. A 2008 survey examined the policies of 25 countries and identifies as the most frequently mentioned the following sectors:
+
<big>Each national or international strategy and policy identifies different categories of sectors that are considered to offer [[Vital Services|vital services]] and thus require [[Critical Infrastructure Protection|protection]]. A 2008 survey examined the policies of 25 countries and identifies as the most frequently mentioned the following sectors, taken up later in the <ref>[http://www.mo.gov.si/fileadmin/mo.gov.si/pageuploads/zki/SklepVlade-potrditev_osnovnih_in_sektorskih_kriterijev_kriticnosti2012.pdf 80200-1/2012/5 (2012)]</ref>:
−
* Banking and Finance
+
* Banking and Finance (Sektor kritične infrastrukture, ki zagotavlja finance)
−
* Central Government / Government Services
+
* Central Government / Government Services [?]
−
* (Tele-)Communication / Information and Communication Technologies (ICT)
+
* (Tele-)Communication / Information and Communication Technologies (ICT) (Sektor kritične infrastrukture, ki zagotavlja informacijsko in komunikacijsko podporo)
−
* Emergency / Rescue Services
+
* Emergency / Rescue Services [?]
−
* Energy / Electricity
+
* Energy / Electricity (Sektor kritične infrastrukture, ki zagotavlja energetsko podporo)
−
* Health Services
+
* Health Services (Sektor kritične infrastrukture, ki zagotavlja zdravstveno oskrbo)
−
* Food
+
* Transportation / Logistics / Distribution (Sektor kritične infrastrukture, ki zagotavlja prometne povezave)
−
* Transportation / Logistics / Distribution
+
* Water (supply) (Sektor kritične infrastrukture, ki zagotavlja preskrbo s pitno vodo)
−
* Water (Supply)
+
* Food (Sektor kritične infrastrukture, ki zagotavlja preskrbo s hrano)
 +
* Envoronmental Protection (Sektor kritične infrastrukture, ki zagotavlja varstvo okolja)
 
The study comments that "these are the core sectors of modern societies, and possibly the areas where a large-scale [[disruption|interruption]] would be most devastating" <ref>[http://www.isn.ethz.ch/Digital-Library/Publications/Detail/?id=91952& E. Brunner, M. Suter, International CIIP Handbook 2008/2009: An Inventory of 25 National and 7 International Critical Information Infrastructure Protection Policies, A. Wenger, V. Mauer, M. Dunn (Eds.), CRN Handbooks, Vol. 4, no. 1, Center for Security Studies (CSS), Zurich, Switzerland, September 2008.]</ref>.</big>
 
The study comments that "these are the core sectors of modern societies, and possibly the areas where a large-scale [[disruption|interruption]] would be most devastating" <ref>[http://www.isn.ethz.ch/Digital-Library/Publications/Detail/?id=91952& E. Brunner, M. Suter, International CIIP Handbook 2008/2009: An Inventory of 25 National and 7 International Critical Information Infrastructure Protection Policies, A. Wenger, V. Mauer, M. Dunn (Eds.), CRN Handbooks, Vol. 4, no. 1, Center for Security Studies (CSS), Zurich, Switzerland, September 2008.]</ref>.</big>
−
 
+
<br/>
 +
<br/>
 
==Definitions==
 
==Definitions==
 
=== European Definitions ===
 
=== European Definitions ===
 
==== [[EU|Council Directive 2008/114/EC]] ====  
 
==== [[EU|Council Directive 2008/114/EC]] ====  
−
<big>The EU directive identifies the following two [[Critical Infrastructure Sector|sectors]] and their respective sub-sectors <ref>[http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2008:345:0075:0082:EN:PDF Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>:  
+
The EU directive identifies the following two [[Critical Infrastructure Sector|sectors]] and their respective sub-sectors <ref>[http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2008:345:0075:0082:EN:PDF Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.]</ref>:  
  
 
'''I Energy'''  
 
'''I Energy'''  
Line 27: Line 29:
 
# Inland waterways transport
 
# Inland waterways transport
 
# Ocean & short sea shipping and ports   
 
# Ocean & short sea shipping and ports   
−
</big><br /><br />
+
<br />
 +
==== [[EU|Resilience of critical entities COM/2020/829 final]] ====
 +
The EU proposed directive identifies the following [[Critical Infrastructure Sector|sectors]] and their respective sub-sectors <ref>[https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:52020PC0829&from=EN Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the resilience of critical entities COM/2020/829 final]</ref>:
 +
 
 +
{| class="wikitable"
 +
|-
 +
! Sector !! Subsector
 +
|-
 +
| rowspan ="5" |Energy||  Electricity
 +
|-
 +
| District Heating
 +
|-
 +
| Oil
 +
|-
 +
| Gas
 +
|-
 +
| Hydrogen
 +
|-
 +
| rowspan ="4" |Transport||  Air
 +
|-
 +
| Rail
 +
|-
 +
| Water (inland, sea, coastal passenger and freight; ports)
 +
|-
 +
| Road
 +
|-
 +
| Banking || 
 +
|-
 +
| Financial Market Infrastructures ||
 +
|-
 +
| Health ||
 +
|-
 +
| Drinking Water ||
 +
|-
 +
| Waste Water ||
 +
|-
 +
| Digital Infrastructure || (IX, DSN, TLD, Cloud, Data centre service, Content delivery, Trust services, NIS Directive)
 +
|-
 +
| Public Administration ||
 +
|-
 +
| Space || (ground-based infrastructure)
 +
|}
 +
 
 +
<br/>
  
 
=== Other International Definitions ===
 
=== Other International Definitions ===
 
==== [[UNISDR]] ====
 
==== [[UNISDR]] ====
−
<big>UNISDR presents the following examples of [[Critical Infrastructure| critical infrastructures]]:</big>
+
UNISDR presents the following examples of [[Critical Infrastructure| critical infrastructures]]:  
 
{{definition|transport systems, air and sea ports, electricity, water and communications systems, hospitals and health clinics, and centres for fire, police and public administration services. <ref>[http://www.unisdr.org/we/inform/terminology 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.]</ref>}}<br /><br />
 
{{definition|transport systems, air and sea ports, electricity, water and communications systems, hospitals and health clinics, and centres for fire, police and public administration services. <ref>[http://www.unisdr.org/we/inform/terminology 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.]</ref>}}<br /><br />
 
=== National Definitions ===
 
=== National Definitions ===
 +
 +
==== [[Argentina]] ====
 +
Líneas vitales/Infraestructuras críticas [http://servicios.infoleg.gob.ar/infolegInternet/anexos/240000-244999/242082/norma.htm SUBSECRETARÍA DE PROTECCIÓN CIVIL Y ABORDAJE INTEGRAL DE EMERGENCIAS Y CATÁSTROFES (1/2015)]:
 +
# Energía: presas, subestaciones, líneas de fluido eléctrico, plantas de almacenamiento de combustibles, oleoductos, gasoductos.
 +
# Transporte: redes viales, puentes, terminales de transporte, aeropuertos, puertos fluviales y marítimos.
 +
# Agua: plantas de tratamiento, acueductos, alcantarillados, canales de irrigación y conducción.
 +
# Comunicaciones: redes y plantas telefónicas, estaciones de radio y televisión, oficinas de correo e información pública.
 +
<br/><br/>
 +
 
==== [[Australia]] ====
 
==== [[Australia]] ====
−
<big>Australia's national critical infrastructure is categorised by seven critical sectors <ref>[http://www.tisn.gov.au/Documents/Australian+Government+s+Critical+Infrastructure+Resilience+Strategy.pdf Critical Infrastructure Resilience Strategy]</ref>:
+
Australia's national critical infrastructure is categorised by seven critical sectors <ref>[http://www.tisn.gov.au/Documents/Australian+Government+s+Critical+Infrastructure+Resilience+Strategy.pdf Critical Infrastructure Resilience Strategy]</ref>:
 
# Energy
 
# Energy
 
# Water services
 
# Water services
Line 43: Line 97:
 
# Health
 
# Health
 
# Banking & Finance
 
# Banking & Finance
−
</big><br />
+
<br />
 
==== [[Austria]] ====
 
==== [[Austria]] ====
−
<big>Austria's national critical infrastructure is categorised by thirteen critical sectors <ref>[http://www.kiras.at/uploads/media/MRV_APCIP_Beilage_Masterplan_FINAL.pdf APCIP]</ref>:
+
Austria's national critical infrastructure is categorised by thirteen critical sectors <ref>[http://www.kiras.at/uploads/media/MRV_APCIP_Beilage_Masterplan_FINAL.pdf APCIP]</ref>:
 
# Energy
 
# Energy
 
# ICT
 
# ICT
Line 59: Line 113:
 
# Distribution system
 
# Distribution system
 
# Search and Rescue
 
# Search and Rescue
−
</big><br />
+
<br />
 +
==== [[Bangladesh]] ====
 +
Bangladesh [[Critical Infrastructure]] is categorised by seven critical sectors <ref>[http://www.slideshare.net/CandiceTang1/cto-ciipgaborone-workshoppresentationfinal18mar2015compressed Commonwealth Telecommunication Organisation, Critical Information Infrastructure Protection (CIIP) workshops 2014]</ref>:
 +
# Energy (oil, gas)
 +
# Telecommunications
 +
# Transport (road)
 +
# Monuments/Buildings
 +
# Water
 +
# Financial sector
 +
# ICT
 +
<br />
 
==== [[Belgium]] ====
 
==== [[Belgium]] ====
−
<big>Belgium's [[National Critical Infrastructure]] is categorised by four critical sectors <ref>[http://www.tevalis.fr/images/ArticleICCWS2014.pdf Service Public Fédéral Intérieur/Federale Overheidsdienst Binnenlandse Zaken F./N. 2011-1799; C-2011/00399 (2011)]</ref>:
+
Belgium's [[National Critical Infrastructure]] is categorised by four critical sectors <ref>[http://www.tevalis.fr/images/ArticleICCWS2014.pdf Service Public Fédéral Intérieur/Federale Overheidsdienst Binnenlandse Zaken F./N. 2011-1799; C-2011/00399 (2011)]</ref>:
 
# Energy (electric power, oil, gas)
 
# Energy (electric power, oil, gas)
 
# Transport (road, rail, air, inland shipping, sea and ocean shipping & harbours)
 
# Transport (road, rail, air, inland shipping, sea and ocean shipping & harbours)
Line 67: Line 131:
 
# Electronic Communication
 
# Electronic Communication
 
Although another law applies, the Space sector is likewise treated as a [[Critical Infrastructure]].  
 
Although another law applies, the Space sector is likewise treated as a [[Critical Infrastructure]].  
−
</big><br />
+
<br /><br/>
 +
==== [[Brazil]] ====
 +
{{definition|[CII] '''Setor''': representa um segmento de Infraestrutura Crítica que pode compreender subsetores. <br/>'''Subsetor''': é um nível de especialização de um segmento de Infraestrutura Crítica, constituído por organizações privadas ou públicas responsáveis pelos ativos de informação para os quais serão definidos controles a fim de atender requisites mínimos de segurança.<ref>[https://www.academia.edu/27271575/GUIA_DE_REFER%C3%8ANCIA_PARA_A_SEGURAN%C3%87A_DAS_INFRAESTRUTURAS_CR%C3%8DTICAS_DA_INFORMA%C3%87%C3%83O GUIA DE REFERÊNCIA PARA A SEGURANÇA DAS INFRAESTRUTURAS CRÍTICAS DA INFORMAÇÃO]</ref>}} <br/><br/>
 +
 
 
==== [[Canada]] ====
 
==== [[Canada]] ====
−
<big>Canada's national infrastructure is categorised by ten critical sectors <ref>[http://www.publicsafety.gc.ca/cnt/ntnl-scrt/crtcl-nfrstrctr/index-eng.aspx Public Safety Canada - Critical Infrastructure]</ref>:
+
Canada's national infrastructure is categorised by ten critical sectors <ref>[http://www.publicsafety.gc.ca/cnt/ntnl-scrt/crtcl-nfrstrctr/index-eng.aspx Public Safety Canada - Critical Infrastructure]</ref>:
 
# Health
 
# Health
 
# Food
 
# Food
Line 80: Line 147:
 
# Government
 
# Government
 
# Transportation
 
# Transportation
−
</big><br />
+
<br />
−
 
+
====[[Chile]]====
 +
Chile's national critical ''information'' infrastructure is categorised by the following critical sectors: <ref>[http://ciberseguridad.interior.gob.cl/media/2017/04/PNCS-ES.pdf Chile Política Nacional de Ciberseguridad  (2017)]</ref> <ref>[http://ciberseguridad.interior.gob.cl/media/2017/04/NCSP-ENG.pdf Chilean National Cybersecurity Policy (2017)]</ref>}}<br/><br/>
 +
# energía (energy)
 +
# telecomunicaciones (telecommunications)
 +
# agua (water)
 +
# salud (health)
 +
# servicios financieros (financial services)
 +
# seguridad pública (public safety)
 +
# transporte (transport)
 +
# administración pública (civil service)
 +
# protección civil (civil protection)
 +
# defense(defence)
 +
<br/>
 
==== [[Croatia]] ====
 
==== [[Croatia]] ====
−
<big>Potentially eleven Critical Infrastructure Sectors have been identified by <ref>[http://www.zakon.hr/z/591/Zakon-o-kriti%C4%8Dnim-infrastrukturama Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)]</ref>:<br>
+
Potentially eleven Critical Infrastructure Sectors have been identified by <ref>[http://www.zakon.hr/z/591/Zakon-o-kriti%C4%8Dnim-infrastrukturama Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)]</ref>:<br>
 
# Energetika - Energy (production, including reservoirs and dams, transmission, storage, transportation fuels and energy distribution systems)
 
# Energetika - Energy (production, including reservoirs and dams, transmission, storage, transportation fuels and energy distribution systems)
 
# Komunikacijska i informacijska tehnologija - Communication and information technology (electronic communication, data transmission, information systems, providing audio and audiovisual media services)
 
# Komunikacijska i informacijska tehnologija - Communication and information technology (electronic communication, data transmission, information systems, providing audio and audiovisual media services)
Line 95: Line 174:
 
# Nacionalni spomenici i vrijednosti - National monuments and valuables
 
# Nacionalni spomenici i vrijednosti - National monuments and valuables
 
# Science and Education
 
# Science and Education
−
</big><br />
+
<br />
  
 
==== [[Czech Republic]] ====
 
==== [[Czech Republic]] ====
−
<big>Czech Republic's national critical infrastructure is categorised by nine critical sectors <ref>Crisis management act</ref>:
+
Czech Republic's national critical infrastructure is categorised by nine critical sectors <ref>Crisis management act</ref>:
 
# Energy
 
# Energy
 
# Water management
 
# Water management
Line 108: Line 187:
 
# Emergency Services
 
# Emergency Services
 
# Public administration
 
# Public administration
−
</big><br />
+
<br />
  
 
==== [[Denmark]] ====
 
==== [[Denmark]] ====
−
<big>Denmark defined critical societal functions instead of critical sectors<ref>[https://brs.dk/viden/publikationer/Documents/National_Risk_Profile_(NRP)_-_English-language_version.pdf National Risk Profile, DEMA, 2013.]</ref> <ref>[http://brs.dk/viden/publikationer/Documents/Nationalt_Risikobillede.pdf Nationalt Risikobillede (NRB), Beredskabsstyrelsen, 2013.]</ref>:
+
Denmark defined critical societal functions instead of critical sectors<ref>[https://brs.dk/viden/publikationer/Documents/National_Risk_Profile_(NRP)_-_English-language_version.pdf National Risk Profile, DEMA, 2013.]</ref> <ref>[http://brs.dk/viden/publikationer/Documents/Nationalt_Risikobillede.pdf Nationalt Risikobillede (NRB), Beredskabsstyrelsen, 2013.]</ref>:
 
# Energy: Supply of electricity, natural gas, crude oil, fuel, etc.
 
# Energy: Supply of electricity, natural gas, crude oil, fuel, etc.
 
# Information and communications technology (ICT): Phone, internet, information networks, processing and transmission of data, navigation, satellite/radio/TV transmission, post and courier services, etc.
 
# Information and communications technology (ICT): Phone, internet, information networks, processing and transmission of data, navigation, satellite/radio/TV transmission, post and courier services, etc.
Line 122: Line 201:
 
# Defence, intelligence and security services: Military defence and enforcement of sovereignty, counter-terrorism, counter-extremism, counter-espionage, personal protection, etc.
 
# Defence, intelligence and security services: Military defence and enforcement of sovereignty, counter-terrorism, counter-extremism, counter-espionage, personal protection, etc.
 
# Exercise of authority (all levels): Crisis management capacity, maintenance of parliamentary, governmental, central administrative, judicial, municipal and regional authority.
 
# Exercise of authority (all levels): Crisis management capacity, maintenance of parliamentary, governmental, central administrative, judicial, municipal and regional authority.
−
</big><br />
+
<br />
 +
 
 +
==== [[El Salvador]] ====
 +
El Salvador's basic and essential infrastructure is categorised by four sectors <ref>[http://www.marn.gob.sv/glosario-de-riesgo/ Glosario de Riesgo, Ministerio de Medio Ambiente y Recursos Naturales, El Salvador]</ref>:
 +
# Energía: presas, subestaciones, líneas de fluido eléctrico, plantas de almacenamiento de combustibles, oleoductos, gasoductos.
 +
# Transporte: redes viales, puentes, terminales de transporte, aeropuertos, puertos fluviales y marítimos.
 +
# Agua: plantas de tratamiento, acueductos, alcantarillados, canales de irrigación y conducción.
 +
# Comunicaciones: redes y plantas telefónicas, estaciones de radio y televisión, oficinas de correo e información publica.
 +
<br/>Or:
 +
# Energy: dams, substations, electric fluid lines, fuel storage plants, oil pipelines, pipelines.
 +
# Transport: road networks, bridges, transport terminals, airports, river and maritime ports.
 +
# Water: treatment plants, aqueducts, sewage systems, irrigation canals and conduction.
 +
# Communications: networks and telephone plants, radio and television stations, post offices and public information.
 +
<br />
  
 
==== [[Estonia]] ====
 
==== [[Estonia]] ====
−
<big>Estonia's critical infrastructure is categorised by nine critical sectors <ref>[http://www.eata.ee/wp-content/uploads/2009/11/Estonian_Cyber_Security_Strategy.pdf Cyber Security Strategy, Min. of Defence, Tallinn (2008)]</ref>:
+
Estonia's critical infrastructure is categorised by nine critical sectors <ref>[http://www.eata.ee/wp-content/uploads/2009/11/Estonian_Cyber_Security_Strategy.pdf Cyber Security Strategy, Min. of Defence, Tallinn (2008)]</ref>:
 
# Energy facilities and networks: electricity, oil and gas storage facilities and refineries, transmission and distribution systems
 
# Energy facilities and networks: electricity, oil and gas storage facilities and refineries, transmission and distribution systems
 
# Communications and information technology: telecommunications, transmission and notification systems, software, hardware and networks, including the infrastructure of the Internet
 
# Communications and information technology: telecommunications, transmission and notification systems, software, hardware and networks, including the infrastructure of the Internet
Line 135: Line 227:
 
# Production, storage and transport of dangerous goods: chemical, biological, radiological and other hazardous materials
 
# Production, storage and transport of dangerous goods: chemical, biological, radiological and other hazardous materials
 
# State agencies: critical services, facilities, information networks; information systems ensuring national security and defence, resources, databases and court registers with legal effect, and national cultural assets.
 
# State agencies: critical services, facilities, information networks; information systems ensuring national security and defence, resources, databases and court registers with legal effect, and national cultural assets.
−
</big><br />
+
<br />
 +
 
 +
==== [[Finland]] ====
 +
In 2010, Finland defined the following set of vital functions <ref>[http://www.yhteiskunnanturvallisuus.fi/en/materials/doc_download/26-security-strategy-for-society Security Strategy for Society, Government Resolution 16.12.2010]</ref>  (Suomalaisen yhteiskunnan elintärkeitä  toimintoja ovat) <ref>Yhteikunnan Turvallisuusstrategia, Valtioneuvoston periaatepäätös 16.12.2010</ref>:
 +
# management of Government affairs (valtion johtamine)
 +
# international activity (kansainvälinen toiminta)
 +
# Finland’s defence capability (Suomen puolustuskyky)
 +
# internal security (sisäinen turvallisuus)
 +
# functioning of the economy and infrastructure (talouden ja infrastruktuurin toimivuus)
 +
# the population’s income security and capability to function (väestön toimeentuloturva ja toimintakyky), and
 +
# psychological resilience to crisis (henkinen kriisinkestävyys)
 +
<br />
 +
 
 
==== [[France]] ====
 
==== [[France]] ====
−
<big>A critical infrastructure sector is defines as follows:</big>
+
A critical infrastructure sector is defines as follows:
−
{{definition|(in French)Secteur d’activités d’importance vitale (SAIV): secteur constitué d’activités concourant à un même objectif: qui ont trait à la production et la distribution de biens ou de services indispensables à la  satisfaction des besoins essentiels pour la vie des populations, ou à l’exercice de l’autorité de l’État, ou au fonctionnement de l’économie, ou au maintien du potentiel de défense, ou à la sécurité de la nation, dès lors que ces activités sont difficilement substituables ou remplaçables; ou qui peuvent présenter un danger grave pour la population. <ref>[http://circulaire.legifrance.gouv.fr/pdf/2014/01/cir_37828.pdf INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J] </ref>}}
+
{{definition|Secteur d’activités d’importance vitale (SAIV): secteur constitué d’activités concourant à un même objectif: qui ont trait à la production et la distribution de biens ou de services indispensables à la  satisfaction des besoins essentiels pour la vie des populations, ou à l’exercice de l’autorité de l’État, ou au fonctionnement de l’économie, ou au maintien du potentiel de défense, ou à la sécurité de la nation, dès lors que ces activités sont difficilement substituables ou remplaçables; ou qui peuvent présenter un danger grave pour la population. <ref>[http://circulaire.legifrance.gouv.fr/pdf/2014/01/cir_37828.pdf INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J] </ref>}}
  
 
An unofficial translation follows:
 
An unofficial translation follows:
 
{{definition|Sector consists of activities contributing to a same objective: related to the production and distribution of goods or services essential to satisfy the basic needs of the population, or related to the [[exercise]] of state authority or the functioning of the economy, or the upkeep of the defence capacity, or the security of the nation, since these activities are difficult to substitute or replace; or that may seriously affect the health or life of the population.}}
 
{{definition|Sector consists of activities contributing to a same objective: related to the production and distribution of goods or services essential to satisfy the basic needs of the population, or related to the [[exercise]] of state authority or the functioning of the economy, or the upkeep of the defence capacity, or the security of the nation, since these activities are difficult to substitute or replace; or that may seriously affect the health or life of the population.}}
  
−
Below a list of the sectors and the responsible ministry can be found. <ref> [http://www.legifrance.gouv.fr/jopdf/common/jo_pdf.jsp?numJO=0&dateJO=20080705&numTexte=6&pageDebut=10823&pageFin=10823 Arrêté du 3 juillet 2008 portant modification de l’arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0156 du 5 juillet 2008, NOR : PRMD0813724A.] </ref> <ref>[http://www.legifrance.gouv.fr/jopdf/common/jo_pdf.jsp?numJO=0&dateJO=20060604&numTexte=1&pageDebut=08502&pageFin=08502 Arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0129 du 4 juin 2006, NOR : PRMX0609332A]</ref>. This is an unofficial translation in English and the Ministry in charge may change name at each nomination of a new government.
+
Below a list of the sectors and the responsible ministry can be found. <ref> [http://www.legifrance.gouv.fr/jopdf/common/jo_pdf.jsp?numJO=0&dateJO=20080705&numTexte=6&pageDebut=10823&pageFin=10823 Arrêté du 3 juillet 2008 portant modification de l’arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0156 du 5 juillet 2008, NOR : PRMD0813724A.] </ref> <ref>[http://www.legifrance.gouv.fr/jopdf/common/jo_pdf.jsp?numJO=0&dateJO=20060604&numTexte=1&pageDebut=08502&pageFin=08502 Arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0129 du 4 juin 2006, NOR : PRMX0609332A]</ref>.  
 
{| class="wikitable"
 
{| class="wikitable"
 
|-
 
|-
 
! Critical Sector !! Responsible Ministry
 
! Critical Sector !! Responsible Ministry
 
|-
 
|-
−
| Civil activities of the State|| Ministry of Home Affairs
+
| Civilian activities || Ministry of Home Affairs
 
|-
 
|-
−
| Judicial activities|| Ministry for Justice
+
| Legal activities|| Ministry for Justice
 
|-
 
|-
 
| Military activities of the State|| Ministry of Defence
 
| Military activities of the State|| Ministry of Defence
 
|-
 
|-
−
| Power|| Ministry for Agriculture
+
| Food|| Ministry for Agriculture
 
|-
 
|-
−
| Electronic communication, audiovisual and information|| Ministry for Electronic communications
+
| Communication, technologies and broadcasting|| Ministry for Electronic communications
 
|-
 
|-
 
| Energy|| Ministry for Energy
 
| Energy|| Ministry for Energy
Line 174: Line 278:
  
 
==== [[Germany]] ====
 
==== [[Germany]] ====
−
<big>In Germany, the following sectors (and industries) are assigned to [[Critical Infrastructure|critical infrastructures]] <ref>Unpublished working glossary of UP KRITIS and BSI, 2014 </ref>:
+
In Germany, the following sectors (and industries) are assigned to [[Critical Infrastructure|critical infrastructures]] <ref>Unpublished working glossary of UP KRITIS and BSI, 2014 </ref>:
 
# Transport and traffic (aviation, maritime shipping, inland waterway transport, rail traffic, road traffic, logistics)
 
# Transport and traffic (aviation, maritime shipping, inland waterway transport, rail traffic, road traffic, logistics)
 
# Energy (electricity, mineral oil, gas)
 
# Energy (electricity, mineral oil, gas)
Line 184: Line 288:
 
# Health (medical care, pharmaceuticals and vaccines, laboratories)
 
# Health (medical care, pharmaceuticals and vaccines, laboratories)
 
# Media and culture (broadcasting (television and radio), printed and electronic press, cultural assets, highly symbolic buildings)
 
# Media and culture (broadcasting (television and radio), printed and electronic press, cultural assets, highly symbolic buildings)
−
</big> <br />
+
<br />
 +
In Deutschland werden folgende Sektoren (und Branchen) den Kritischen Infrastrukturen zugeordnet:
 +
# Transport und Verkehr (Luftfahrt, Seeschifffahrt, Binnenschifffahrt, Schienenverkehr, Straßenverkehr, Logistik)
 +
# Energie (Elektrizität, Mineralöl, Gas)
 +
# Informationstechnik und Telekommunikation (Telekommunikation, Informationstechnik)
 +
# Finanz- und Versicherungswesen (Banken, Versicherungen, Finanzdienstleister, Börsen)
 +
# Staat und Verwaltung (Regierung und Verwaltung, Parlament, Justizeinrichtungen, Notfall- und Rettungswesen einschließlich Katastrophenschutz)
 +
# Ernährung (Ernährungswirtschaft, Lebensmittelhandel)
 +
# Wasser (Öffentliche Wasserversorgung, öffentliche Abwasserbeseitigung)
 +
# Gesundheit (Medizinische Versorgung, Arzneimittel und Impfstoffe, Labore)
 +
# Medien und Kultur (Rundfunk (Fernsehen und Radio), gedruckte und elektronische Presse, Kulturgut, symbolträchtige Bauwerke)
 +
 
 
==== [[Ghana]]====
 
==== [[Ghana]]====
−
<big>Ghana defines the following ten sectors to be part of their [[Critical National Infrastructure]] <ref>[http://www.moc.gov.gh/index.php/media-downloads/file-downloads?download%3D26 Republic of Ghana - National Cyber Security Policy & Strategy (2014)]</ref>:
+
Ghana defines the following ten sectors to be part of their [[Critical National Infrastructure]] <ref>[http://certgh-web.cert-gh.org/wp-content/uploads/2015/09/National-Cyber-Security-Policy-Strategy-Revised_23_07_15.pdf  Republic of Ghana - National Cyber Security Policy & Strategy (2015)]</ref>:
 
# National Defense and Security
 
# National Defense and Security
 
# Banking and Finance
 
# Banking and Finance
Line 197: Line 312:
 
# Emergency Services
 
# Emergency Services
 
# Food and Agriculture
 
# Food and Agriculture
−
</big> <br />
 
−
 
 
<br />
 
<br />
  
 
==== [[India]] ====
 
==== [[India]] ====
−
{{definition|Critical sectors means sectors which are critical to the nation and whose incapacity or destruction will have a debilitating [[impact]] on national security, economy, public health or safety. <ref>[http://deity.gov.in/sites/upload_files/dit/files/GSR_19(E).pdf G.S.R 19 (E) dated 16.01.2014-Information Technology (National critical Information Infrastructure Protection centre and manner of performing function and duties) Rules, 2013] </ref>}}<br />
+
{{definition|Critical sectors means sectors which are critical to the nation and whose incapacity or destruction will have a debilitating [[impact]] on national security, economy, public health or safety. <ref>[http://deity.gov.in/sites/upload_files/dit/files/GSR_19(E).pdf G.S.R 19 (E) dated 16.01.2014-Information Technology (National critical Information Infrastructure Protection centre and manner of performing function and duties) Rules, 2013] </ref>}}
 +
The sectors that have been designated as critical are: <ref>[http://perry4law.org/cecsrdi/wp-content/uploads/2013/12/Guidelines-For-Protection-Of-National-Critical-Information-Infrastructure.pdf Guidelines for the Protection of Critical Information Infrastructure, Version 1.0, June 2013. New Delhi: NCIIPC, p. 1.]</ref>
 +
# Defence
 +
# Banking and financial sector
 +
# ICT and telecommunication
 +
# Transportation
 +
# Power
 +
# Energy
 +
# Ministry of Home Affairs
 +
# Ministry of External Affairs
 +
# Ministry of Heavy Industries
 +
# Niti Ayog (the erstwhile Planning Commission)
 +
<br />
 +
However, in  2015 the NCIIPC <ref>[http://workshop.nkn.in/2015/sources/speakers/sessions/NKN_NCIIPC.pdf workshop presentation by the NATIONAL CRITICAL INFORMATION INFRASTRUCTURE PROTECTION CENTRE (NCIIPC), 2015]</ref> presented the following list of critical sectors:
 +
# Energy
 +
# Transportation (air, surface, rail & water)
 +
# Banking & Finance
 +
# Telecommunication
 +
# Defence
 +
# Space
 +
# Law enforcement, security & intelligence
 +
# Sensitive Government organisations
 +
# Public Health
 +
# Water supply
 +
# Critical manufacturing
 +
# E-Governance
 +
<br/>
 +
==== [[Indonesia]] ====
 +
Infrastruktur kritis nasional yakni infrastruktur pada sektor-sektor <ref>[https://dkn.go.id/berita/55/melindungi-infrastruktur-kritis-nasional-dari-serangan-cyber--perspektif-kebijakan-ketahanan-nasional.html Melindungi Infrastruktur Kritis Nasional dari Serangan Cyber: Perspektif Kebijakan Ketahanan Nasional]</ref>:
 +
# Energi  (energy)
 +
# Transportasi (transport)
 +
# keuangan dan perbankan (finances and banking)
 +
# telekomunikasi (telecommunication)
 +
# pertahanan (defence)
 +
# penegakan hokum (law enforment)
 +
# keamanan dan intelijen (security and intelligence services)
 +
# kesehatan (health)
 +
# suplai air (drinking water)
 +
# tata kelola elektronik (e-Governance)
 +
# industri kritis (critical industry)
 +
# organisasi-orgaisasi sensitif (sensitive organisations)
 +
# dan luar angkasa (space)
  
 +
<br/>
 
==== [[Japan]] ====
 
==== [[Japan]] ====
−
<big>Japan's national critical infrastructure is categorised by ten critical sectors <ref>[http://www.nisc.go.jp/active/kihon/pdf/cybersecuritystrategy-en.pdf Cyber Security Strategy (2013)]</ref>:
+
Japan's national critical infrastructure is categorised by thirteen critical sectors: <ref>[https://www.nisc.go.jp/active/infra/pdf/infra_rt4.pdf 重要インフラの情報セキュリティ対策に係る  第４次行動計画  (2018)]</ref>, <ref>[https://www.nisc.go.jp/eng/pdf/cs_policy_cip_eng_v4.pdf The Cybersecurity Policy for Critical Infrastructure Protection (4th Edition) (Tentative Translation) (2018)]</ref>, <ref>[http://www.nisc.go.jp/active/kihon/pdf/cybersecuritystrategy-en.pdf Cyber Security Strategy (2013)]</ref>:
−
# Information and communications
+
# Information and communication services (情報通信)
−
# Finance
+
# Financial services (金融)
−
# Aviation
+
# Aviation services (航空)
−
# Railways
+
# Railway services (鉄道)
−
# Electricity
+
# Electric power supply services (電力)
−
# Gas
+
# Gas supply services (ガス)
−
# Government and administrative services (including local public authorities)
+
# Government and administrative services (including local public authorities) <br/>(政府・行政サービス（地方公共団体を含む）)
−
# Medical services  
+
# Medical services (医療)
−
# Water  
+
# Water services (水道)
−
# Logistics
+
# Logistics services (物流)
−
</big><br />
+
# Chemical industries (化学)
 +
# Credit card services (クレジット)
 +
# Petroleum industries (び「石油)
 +
<br />
 +
 
 +
==== [[Jersey]] ====
 +
Jersey's [[Critical National Infrastructure |critical national infrastructure]] is categorised by the following eight critical sectors: <ref>[https://www.gov.je/SiteCollectionDocuments/Government%20and%20administration/C%20Draft%20Digital%20Policy%20Framework%202016%20GC.pdf Jersey's Digital Policy Framework (2016)]</ref>
 +
# Electricity
 +
# Gas
 +
# Communications
 +
# Transport (including Ports and Airport)
 +
# Emergency services
 +
# Public services
 +
# Health
 +
# Water
 +
<br/>
 +
====[[Kuwait]]====
 +
Kuwait's [[Critical National Infrastructure |critical national infrastructure]] is categorised by the following eight vital sectors: <ref>[https://citra.gov.kw/sites/ar/LegalReferences/Cyber%20Security.pdf الاستراتيجية الوطنية للأمن السيبراني لدولة الكويت (2017-2020)]</ref>,<ref>[https://citra.gov.kw/sites/en/LegalReferences/English%20Cyber%20Security%20Strategy.pdf National Cyber Security Strategy 2017-2020]</ref>
 +
# Oil sector  القطاع النفطي
 +
# Military sector  القطاع الع�صكري
 +
# Energy sector and electricity and water  قطاع الطاقة والكهرباء واملاء.
 +
# Financial sector  القطاع املايل.
 +
# Communications, telecommunication and information technology sector  قطاع االت�صاالت وتكنولوجيا املعلومات.
 +
# Transport sector  قطاع النقل.
 +
# Health sector  القطاع ال�صحي.
 +
# Other government entities .اجلهات احلكومية الأخرى.
 +
<br/>
 +
 
 
==== [[Malaysia]] ====
 
==== [[Malaysia]] ====
−
<big>Malaysia's National Critical '''Information''' Infrastructure (CNII):<ref>[http://cnii.cybersecurity.org.my/main/index.html Malaysia (2009)]</ref>  
+
Malaysia's National Critical '''Information''' Infrastructure (CNII):<ref>[http://cnii.cybersecurity.org.my/main/index.html Malaysia (2009)]</ref>  
 
# National Defence & Security
 
# National Defence & Security
 
# Banking & Finance
 
# Banking & Finance
Line 229: Line 411:
 
# Emergency Services
 
# Emergency Services
 
# Food & Agriculture
 
# Food & Agriculture
−
</big> <br />
+
<br />
  
 
==== [[Netherlands]] ====
 
==== [[Netherlands]] ====
−
The 2015 [[Critical Infrastructure]] review <ref>[https://www.nctv.nl/actueel/nieuws/kabinet-versterkt-crisisbeheersing.aspx?cp=126&cs=59950 Voortgangsbrief nationale veiligheid 9 april 2015]</ref> redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the [[Critical Infrastructure]] table below were announced <ref>[https://www.rijksoverheid.nl/binaries/rijksoverheid/documenten/kamerstukken/2016/09/16/voortgangsbrief-nationale-veiligheid/TK+Voortgangsbrief+Nationale+Veiligheid.pdf Voortgangsbrief Nationale Veiligheid 2016]</ref>.   
+
The 2015 [[Critical Infrastructure]] review redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the [[Critical Infrastructure]] table below were announced <ref>[https://www.rijksoverheid.nl/binaries/rijksoverheid/documenten/kamerstukken/2016/09/16/voortgangsbrief-nationale-veiligheid/TK+Voortgangsbrief+Nationale+Veiligheid.pdf Voortgangsbrief Nationale Veiligheid 2016]</ref> <ref>[https://english.nctv.nl/documents/publications/2018/02/01/factsheet-critical-infrastructure Factsheet Resilient critical infrastructure, NCTV, Netherlands]</ref>. Later, road and rail transport were added (again).   
 
{| class="wikitable"
 
{| class="wikitable"
 
|-
 
|-
 
! Critical Processes !! Category || Product, service or location || Sector || Responsible Ministry
 
! Critical Processes !! Category || Product, service or location || Sector || Responsible Ministry
 
|-
 
|-
−
| National transmission and distribution of power|| A || rowspan ="2" | Electricity ||rowspan ="5" |  Energy || rowspan ="5"  |Economic Affairs
+
| National transport and distribution of power|| A || rowspan ="2" | Electricity ||rowspan ="5" |  Energy || rowspan ="8"  |Economic Affairs and Climate Policy
 
|-
 
|-
 
| Regional distribution of electricity|| B  
 
| Regional distribution of electricity|| B  
Line 247: Line 429:
 
| Oil supply ||  A || Oil
 
| Oil supply ||  A || Oil
 
|-
 
|-
−
| Internet and data services || B ||  Internet and data services ||rowspan ="4" | ICT/Telecom || rowspan ="4" |Economic Affairs
+
| Internet and data services || B ||  Internet and data services ||rowspan ="3" | ICT/Telecom  
 +
|-
 +
| Internet access and data traffic || B || Internet access and data traffic
 
|-
 
|-
−
| Internet access and data transport || B || Internet access and data transport
+
| Voice services and text messaging || B || Voice services and text messaging
 
|-
 
|-
−
| Speech-communication services and SMS || B || Speech and SMS
+
| Geolocation and time information by GNSS || B || GNSS || || rowspan ="9" | Infrastructure and Water Management
 
|-
 
|-
−
| Satellite services || ''t.b.d.''
+
| Drinking water supply|| A || Drinking water  || Drinking water
 
|-
 
|-
−
| Drinking water supply|| A || Drinking water || Drinking water || Infrastructure and the Environment
+
| Flood defences and water management || A || (part of) primary flood defences, regional flood defences || Water
 
|-
 
|-
−
| Flood defences and water management || A || (part of) primary flood defences, regional flood defences  || Water || Infrastructure and the Environment
+
| Air Traffic || B || Air Traffic Control (ATC) and aircraft handling || rowspan ="4" | Transport
 
|-
 
|-
−
| Air traffic control || B || Schiphol Airport || rowspan ="2" | Transport || rowspan ="2" | Infrastructure and the Environment
+
| Vessel Traffic Service || B || Vessel Traffic Service (Port of Rotterdam)  
 
|-
 
|-
−
| Vessel Traffic Service || B || Port of Rotterdam  
+
| Transport of persons and goods by (main) railway infrastructure || B || Main rail infrastructure  
 
|-
 
|-
−
| Large-scale production/processing and/or storage of chemicals and petrochemicals  || B || Chemical and petrochemical industry || Chemical || Infrastructure and the Environment
+
| Transport by (main) road infrastructure || B || Main road infrastructure (highways, key tunnels and bridges)  
 
|-
 
|-
−
| Storage, production and processing of nuclear materials  || A || Nuclear industry  || Nuclear || Infrastructure and the Environment
+
| Large-scale production/processing and/or storage of chemicals and petrochemicals  || B || Chemical and petrochemical industry  || Chemistry
 +
|-
 +
| Storage, production and processing of nuclear materials  || A || Nuclear || Nuclear  
 
|-
 
|-
 
| Retail transactions || B || rowspan ="4" | Financial transactions  || rowspan ="4" | Financial || rowspan ="4" | Finance
 
| Retail transactions || B || rowspan ="4" | Financial transactions  || rowspan ="4" | Financial || rowspan ="4" | Finance
Line 275: Line 461:
 
| Securities trading || B  
 
| Securities trading || B  
 
|-
 
|-
−
| Emergency Services communication (1-1-2 and C2000)  || B || rowspan ="2" | Maintaining public order and Safety || rowspan ="2" | Public order and Safety  (OOV) || rowspan ="2" | Security and Justice
+
| Emergency Services communication (1-1-2 and C2000)  || B || Communication with and between emergency services through the 112 emergency number and C2000 || rowspan ="2" | Public order and Safety  (OOV) || rowspan ="2" | Justice and Security
 
|-
 
|-
−
| Police Deployment  || B  
+
| Police Deployment  || B ||
 
|-
 
|-
−
| E-government: The availability of reliable personal and corporate data about individuals and organisations, the ability to share such data, and the availability of data systems which multiple government agencies require to function || B || Digital government ''(under review)''|| Public Administration || The Interior and Kingdom Relations
+
| Personal and organisational record databases || B || rowspan ="4"| Digital government || rowspan ="4"| Public Administration || rowspan ="4"| The Interior and Kingdom Relations
 
|-
 
|-
−
| National Security || B || National Security || Defence || Defence
+
| Interconnectivity between record databases || B
 +
|-
 +
| Electronic messaging and information disclosure to citizens || B
 +
|-
 +
| Identification and authentication of citizens and organisations || B
 +
|-
 +
| Military deployment|| B || Military deployment Armed Forces || Defence || Defence
 
|}
 
|}
  
  
−
<big>Netherlands' national infrastructure was (2005 definition) categorised by twelve critical sectors and 31 subsectors <ref>[http://www.nifv.nl/upload/91714_668_1223393504359-rapport_vitale_infrastruictuur_met_plaatjes_definitief%5b1%5d.pdf Bescherming Vitale infrastructuur (2010)]</ref>:
+
The Netherlands' national infrastructure was (2005 definition) categorised by twelve critical sectors and 31 subsectors <ref>[http://www.nifv.nl/upload/91714_668_1223393504359-rapport_vitale_infrastruictuur_met_plaatjes_definitief%5b1%5d.pdf Bescherming Vitale infrastructuur (2010)]</ref>:
 
# Energy: electric power, gas, and oil
 
# Energy: electric power, gas, and oil
 
# Telecommunications and IT: fixed and mobile communications, radio, broadcasting, internet, and postal and courier services
 
# Telecommunications and IT: fixed and mobile communications, radio, broadcasting, internet, and postal and courier services
Line 292: Line 484:
 
# Health: emergency and other hospital care, medicines, and vaccines
 
# Health: emergency and other hospital care, medicines, and vaccines
 
# Financial services: payments (bank retail), and financial transfers by the Administration
 
# Financial services: payments (bank retail), and financial transfers by the Administration
−
# Surface water: water quality and water quantity (stemming and managing)
+
# Surface water: water quality and water quantity (stemming and managing)
 
# Public order and safety
 
# Public order and safety
 
# Legal order/justice: courts and detention, and law enforcement
 
# Legal order/justice: courts and detention, and law enforcement
Line 298: Line 490:
 
# Transport: mainport Schiphol, mainport Rotterdam, main road infrastructure, main inland shipping infrastructure, and rail infrastructure  
 
# Transport: mainport Schiphol, mainport Rotterdam, main road infrastructure, main inland shipping infrastructure, and rail infrastructure  
 
# Chemical and  nuclear industry: transport, storage, production, and processing of dangerous materials
 
# Chemical and  nuclear industry: transport, storage, production, and processing of dangerous materials
 +
Each critical sector falls under the responsibility of a designated ministry.
 +
<br /><br />
 +
{{definition|Vitale sector: Een publiek en/of private groep organisaties en bedrijven die producten, goederen of diensten leveren en/of beheren, die als kritisch zijn benoemd voor de handhaving van de vitale belangen of vitale infrastructuur van Nederland. <ref>[https://kennisopenbaarbestuur.nl/media/53867/handreiking-cybercrime.pdf Handreiking Cybercrime (2012)]</ref>}}<br/><br/>
  
−
Each critical sector falls under the responsibility of a designated ministry.</big><br />
+
==== [[North Macedonia]] ====
 +
New Macedonia recognises five critical infrastructure sectors:
 +
# Energy (production, transmission and distribution)
 +
# Water supply
 +
# Environment
 +
# Macedonian radio and television, electronic and print media
 +
# National bank of North Macedonia and other registered legal banking entities
  
 
==== [[Norway]] ====
 
==== [[Norway]] ====
−
<big>Norway distinguishes six critical infrastructures and eleven critical societal functions.
+
Norway distinguishes six critical infrastructures and eleven critical societal functions.
 
Critical infrastructures:
 
Critical infrastructures:
−
# Electric Power
+
# Electric Power (kraft)
−
# Electronic communications
+
# Electronic communications (elektronisk kommunikasjon)
−
# Water supply and Sewage
+
# Water supply and Sewage (vann og avløp)
−
# Transport
+
# Transport (transport)
−
# Oil and Gas
+
# Oil and Gas (olje og gass)
−
# Satellite-based infrastructure
+
# Satellite-based infrastructure (satellittbasert kommunikasjon og navigasjon)
 +
 
 +
In 2006, three additional critical sectors existed, which have shifted to critical societal functions later <ref>[https://www.regjeringen.no/contentassets/c8b710be1a284bab8aea8fd955b39fa0/no/pdfs/nou200620060006000dddpdfs.pdf Norwegian Official Report: Når sikkerhet er viktigst - Beskyttelse av landets kritiske infrastrukturer og kritiske samfunnsfunksjoner. Department of Justice and Public Security . NOU 2006:6]</ref>:
 +
# Banking and Finance (bank og finans)
 +
# Monuments and symbols (kulturminner og symboler)
 +
# Food Supply (matforsyning)
 +
 
 +
Critical Societal Functions (Kritisk samfunnsfunksjon er det mest sentrale begrepet i definisjonsapparatet):
 +
# Banking and Finance (bank og finans)
 +
# Food Supply (matforsyning)
 +
# Health Services, Social Services and Social Security Benefit (helse-, sosial- og trygdetjenester)
 +
# Police (politi)
 +
# Emergency and Rescue Services (nød- og redningstjeneste)
 +
# Crisis Management (kriseledelse)
 +
# Parliament and Government (storting og regjering)
 +
# The Judiciary (domstolene)
 +
# Defence (forsvaret)
 +
# Environmental Surveillance (miljøovervåkning)
 +
# Waste Treatment (renovasjon)
 +
<br />
 +
 
 +
====[[Pakistan]]====
 +
{{definition|Critical Sector - Government systems, utility infrastructure (electricity, gas, and water), education, health, transport system (air, road, rail, and sea), emergency services, manufacturing facilities, banking and financial sector, telecommunication/ ICT sector, dams, etc. <ref>[https://moitt.gov.pk/SiteImage/Misc/files/National%20Cyber%20Security%20Policy%202021%20Final.pdf National Cyber Security Policy 2021]</ref>}}<br/><br/>
 +
 
 +
==== [[Papua New Guinea]]====
 +
Critical Infrastructure<ref>[http://www.nicta.gov.pg/images/cyber/act/Cybercrime%20Code%20Act%202016.pdf Papua New Guinea Criminal code act 2016]</ref> at least:
 +
# transportation
 +
# communication systems
 +
# water supply
 +
# electricity supply
 +
# banking services
 +
# public institutions including health services, post offices and education services.<br/>
  
−
Critical Societal Functions:
 
−
# Banking and Finance
 
−
# Food Supply
 
−
# Health Services, Social Services and Social Security Benefit
 
−
# Police
 
−
# Emergency and Rescue Services
 
−
# Crisis Management
 
−
# Parliament and Government
 
−
# The Judiciary
 
−
# Defence
 
−
# Environmental Surveillance
 
−
# Waste Treatment
 
−
</big><br />
 
 
==== [[Poland]] ====
 
==== [[Poland]] ====
−
<big>Poland distinguishes nine critical infrastructure sectors / functions: <ref>[http://rcb.gov.pl/infrastruktura-krytyczna/ INFRASTRUKTURA KRYTYCZNA webpage]</ref>
+
Poland distinguishes the following critical infrastructure sectors / functions: <ref>[http://rcb.gov.pl/infrastruktura-krytyczna/ INFRASTRUKTURA KRYTYCZNA webpage]</ref>
 
# Banking and financial systems (finansowe)
 
# Banking and financial systems (finansowe)
 
# Health (ratownicze)
 
# Health (ratownicze)
Line 334: Line 553:
 
# Food and water provision systems (zaopatrzenia w żywność & zaopatrzenia w wodę)
 
# Food and water provision systems (zaopatrzenia w żywność & zaopatrzenia w wodę)
 
# Energy and fuel provision systems (zaopatrzenia w energię, surowce energetyczne i paliwa)
 
# Energy and fuel provision systems (zaopatrzenia w energię, surowce energetyczne i paliwa)
−
# Systems that deal with the production, use, storage of chemical and radioactive substances, and also dangerous substance pipelines (produkcji, składowania, przechowywania i stosowania substancji chemicznych i promieniotwórczych, w tym rurociągi substancji niebezpiecznych).
+
# Systems that deal with the production, use, storage of chemical and radioactive substances, and also dangerous substance pipelines (produkcji, składowania, przechowywania i stosowania substancji chemicznych i promieniotwórczych, w tym rurociągi substancji niebezpiecznych)
−
</big><br />
+
# ensuring the continuity of public administration (zapewniające ciągłość działania administracji publicznej).
 +
<br />
  
 
==== [[Qatar]] ====
 
==== [[Qatar]] ====
−
<big>The critical sectors which comprise Qatar's [[National Critical Infrastructure|national critical infrastructure]] include but are not restricted to <ref>[http://www.ictqatar.qa/en/cyber-security/national-cyber-security-strategy QATAR National Cyber Security Strategy (May 2014)]</ref> <ref>[http://www.ictqatar.qa/ar/cyber-security/national-cyber-security-strategy الاستراتيجية الوطنية للأمن السيبراني QATAR NCSS - Arabic version (May 2014)]</ref> :
+
The critical sectors which comprise Qatar's [[National Critical Infrastructure|national critical infrastructure]] include but are not restricted to <ref>[http://www.ictqatar.qa/en/cyber-security/national-cyber-security-strategy QATAR National Cyber Security Strategy (May 2014)]</ref> <ref>[http://www.ictqatar.qa/ar/cyber-security/national-cyber-security-strategy الاستراتيجية الوطنية للأمن السيبراني QATAR National Cyber Security Strategy - Arabic version (May 2014)]</ref> :
 
# Energy, Electricity, and Water  (قطاع الطاقة والكهرباء والماء)
 
# Energy, Electricity, and Water  (قطاع الطاقة والكهرباء والماء)
 
# Finance (القطاع الما ي ل)
 
# Finance (القطاع الما ي ل)
Line 345: Line 565:
 
# Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
 
# Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
 
# Transportation (قطاع النقل والمواصلات)
 
# Transportation (قطاع النقل والمواصلات)
−
</big><br />
+
<br />
  
 
==== [[Republic of Korea]] ====
 
==== [[Republic of Korea]] ====
−
<big>Nine critical sectors comprise the Republic of Korea's [[Critical Infrastructure|national critical infrastructure]] <ref>[
+
Nine critical sectors comprise the Republic of Korea's [[Critical Infrastructure|national critical infrastructure]] <ref>[http://www.law.go.kr/eng/engMain.do Act on the Protection of Information and Communications Infrastructure. Korea Act No.11690, 2013.]</ref>:
−
http://www.law.go.kr/eng/engMain.do Framework Act on the Management of Disasters and Safety. Korea Act No.10347, 2010.]</ref>:
 
 
# Energy
 
# Energy
 
# Telecommunications
 
# Telecommunications
Line 359: Line 578:
 
# Government critical facilities
 
# Government critical facilities
 
# Water Supply
 
# Water Supply
−
 
−
</big>
 
 
<br />
 
<br />
  
 
==== [[Republic of Trinidad & Tobago]] ====
 
==== [[Republic of Trinidad & Tobago]] ====
−
<big>The national cyber security strategy recognizes the following critical (information) infrastructure sectors <ref>[http://www.nationalsecurity.gov.tt/Portals/0/Pdf%20Files/National_Cyber_Security%20Strategy_Final.pdf Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)]</ref>:
+
The national cyber security strategy recognizes the following critical (information) infrastructure sectors <ref>[http://www.nationalsecurity.gov.tt/Portals/0/Pdf%20Files/National_Cyber_Security%20Strategy_Final.pdf Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)]</ref>:
 
# Banking and financial services
 
# Banking and financial services
 
# Communications infrastructure
 
# Communications infrastructure
Line 371: Line 588:
 
# Public transportation
 
# Public transportation
 
# Key infrastructure
 
# Key infrastructure
−
</big><br />
+
<br />
 +
 
 +
==== [[Singapore]] ====
 +
Singapore recognises the following eight CI sectors: <ref>[https://www.csa.gov.sg/~/media/csa/cybersecurity_bill/draft_cybersecurity_bill_2017.ashx (draft) Cybersecurity Bill 2017]</ref>
 +
# Energy
 +
# Banking and Finance
 +
# Healthcare
 +
# Transport (which includes Land, Maritime, and Aviation)
 +
# Government
 +
# Information and communication
 +
# Media
 +
# Security & Emergency Services
 +
<br/><br/>
 +
 
 
==== [[Slovakia]] ====
 
==== [[Slovakia]] ====
 
{{definition|Critical infrastructure sector: part of the [[Critical Infrastructure|critical infrastructure]], to be integrated into devices; sector may contain one or more sub-sectors.<br/><br/>Sektorom kritickej infraštruktúry časť kritickej infraštruktúry, do ktorej sa zaraďujú prvky; sektor môže obsahovať jeden alebo viac podsektorov kritickej infraštruktúry (ďalej len „podsektor“). <ref>[http://www.zbierka.sk/sk/predpisy/45-2011-z-z.p-33998.pdf Act no. 45/ 2011 Col. On Critical Infrastructure]</ref>}}<br />
 
{{definition|Critical infrastructure sector: part of the [[Critical Infrastructure|critical infrastructure]], to be integrated into devices; sector may contain one or more sub-sectors.<br/><br/>Sektorom kritickej infraštruktúry časť kritickej infraštruktúry, do ktorej sa zaraďujú prvky; sektor môže obsahovať jeden alebo viac podsektorov kritickej infraštruktúry (ďalej len „podsektor“). <ref>[http://www.zbierka.sk/sk/predpisy/45-2011-z-z.p-33998.pdf Act no. 45/ 2011 Col. On Critical Infrastructure]</ref>}}<br />
−
<big>Slovakia recognises nine critical sectors: <ref>[http://www.economy.gov.sk/narodny-program-pre-ochranu-a-obranu-kritickej-infrastruktury-v-slovenskej-republike--pdf-/136156s Národný program pre ochranu a obranu kritickej infraštruktúry v Slovenskej republike]</ref>
+
Slovakia recognises nine critical sectors: <ref>[http://www.economy.gov.sk/narodny-program-pre-ochranu-a-obranu-kritickej-infrastruktury-v-slovenskej-republike--pdf-/136156s Národný program pre ochranu a obranu kritickej infraštruktúry v Slovenskej republike]</ref>
 
# Energy (Energetika)
 
# Energy (Energetika)
 
# Transport (Doprava)
 
# Transport (Doprava)
Line 384: Line 614:
 
# Public Order and Internal Security (Verejný poriadok a vnútorná bezpečnosť)
 
# Public Order and Internal Security (Verejný poriadok a vnútorná bezpečnosť)
 
# Industry (Priemysel)
 
# Industry (Priemysel)
−
</big><br />
+
<br />
  
 
==== [[Slovenia]] ====
 
==== [[Slovenia]] ====
−
<big>Sectors Critical Infrastructure of the Republic of Slovenia <ref>[http://www.mo.gov.si/fileadmin/mo.gov.si/pageuploads/zki/SklepVlade-potrditev_osnovnih_in_sektorskih_kriterijev_kriticnosti2012.pdf Osnovni in sektorski kriteriji kritičnosti za določanje kritične infrastructure državnega pomena v Republiki Sloveniji (2012)]</ref>:
+
Sectors Critical Infrastructure of the Republic of Slovenia <ref>[http://www.mo.gov.si/fileadmin/mo.gov.si/pageuploads/zki/SklepVlade-potrditev_osnovnih_in_sektorskih_kriterijev_kriticnosti2012.pdf Osnovni in sektorski kriteriji kritičnosti za določanje kritične infrastructure državnega pomena v Republiki Sloveniji (2012)]</ref>:
−
# Energy support
+
# Energy (more than 7 days to rehabilitate; power disruption for more than 100.000 people; interruption petroleum and gas products for more than a week affecting over 100.000 people and costs in the amount of 10 M Euro/day)
−
# Transport
+
# Transportation (disable rail traffic on key routes for more than a couple of weeks and damages of 10 M Euro/day)
−
# Food
+
# Food (unable to provide basic food products for a week for over 100.000 people)
−
# Drinking water
+
# Drinking water (unable to provide drinking water for a week for over 100.000 people)
−
# Medical care
+
# Health / Medical care (unable to provide emergency care and public health services for over 100.000 people)
−
# Finance
+
# Finance (unable to provide money supply for more than 3 days in an area of more than 50,000 people)
−
# Environmental protection
+
# Environmental protection (pollution with a short-term harmful effect on the population in an area of over 50,000 people)
−
# Information and communication
+
# Communications and Information Technologies 
−
</big><br />
+
<br />
  
 
==== [[Spain]] ====
 
==== [[Spain]] ====
−
<big>Spains' national infrastructure is currently categorised by twelve critical sectors<ref>[http://www.cnpic.es/en/Preguntas_Frecuentes/Que_es_una_Infraestructura_Critica/index.html CNPIC]</ref>:
+
Spains' national infrastructure is currently categorised by twelve critical sectors<ref>[http://www.cnpic.es/en/Preguntas_Frecuentes/Que_es_una_Infraestructura_Critica/index.html CNPIC]</ref>:
 
# Administration
 
# Administration
 
# Chemical Industry
 
# Chemical Industry
Line 412: Line 642:
 
# Transport
 
# Transport
 
# Water
 
# Water
−
</big><br />
+
<br />
 +
 
 
==== [[Sweden]] ====
 
==== [[Sweden]] ====
−
<big>Swedens' national infrastructure is currently categorised by eleven critical sectors providing a set of critical societal functions <ref>[https://www.msb.se/RibData/Filer/pdf/27412.pdf Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure, Swedish Civil Contingencies Agency (MSB) (2014).]</ref>:
+
Swedens' national infrastructure is currently categorised by eleven critical sectors providing a set of critical societal functions <ref>[https://www.msb.se/RibData/Filer/pdf/27412.pdf Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure, Swedish Civil Contingencies Agency (MSB) (2014).]</ref>:
 
# Energy Supply
 
# Energy Supply
 
# Information and Communication Technologies (ICT)
 
# Information and Communication Technologies (ICT)
Line 426: Line 657:
 
# Trade and Industry
 
# Trade and Industry
 
# Public Administration (governance, support functions, service sector)
 
# Public Administration (governance, support functions, service sector)
−
</big><br />
+
<br />
  
 
==== [[Switzerland]] ====
 
==== [[Switzerland]] ====
−
<big>Switzerlands' national infrastructure is currently categorised by ten critical sectors and 28 subsectors which are subcategorised very high critical, high critical and regular critical <ref>[http://www.bevoelkerungsschutz.admin.ch/internet/bs/en/home/themen/ski.parsysrelated1.82246.downloadList.18074.DownloadFile.tmp/factsheete.pdf The Swiss Programme on Critical Infrastructure Protection - factsheet]</ref>:
+
Switzerlands' national infrastructure is currently categorised by ten critical sectors and 28 subsectors which are subcategorised very high critical, high critical and regular critical <ref>[http://www.bevoelkerungsschutz.admin.ch/internet/bs/en/home/themen/ski.parsysrelated1.82246.downloadList.18074.DownloadFile.tmp/factsheete.pdf The Swiss Programme on Critical Infrastructure Protection - factsheet]</ref>:
 
# Energy: natural gas supply, oil supply, and power supply
 
# Energy: natural gas supply, oil supply, and power supply
 
# Financial services: banks, and insurance companies
 
# Financial services: banks, and insurance companies
Line 440: Line 671:
 
# Water and food:  food supply, drinking water supply
 
# Water and food:  food supply, drinking water supply
 
# Waste disposal: waste, waste water
 
# Waste disposal: waste, waste water
−
</big><br />
+
<br />
  
 
==== [[Turkey]] ====
 
==== [[Turkey]] ====
−
<big>Turkey's national infrastructure is currently categorised by five critical sectors <ref>[http://www.resmigazete.gov.tr/eskiler/2011/10/20111018-4.htm Decree No. 2 on the Regulation Amending the Regulation on Military Forbidden Zones and Security Zones, 20-6-2013]</ref> <ref>[http://www.udhb.gov.tr/doc/siberg/2016-2019guvenlik.pdf 2016-2019 ULUSAL SİBER GÜVENLİK STRATEJİSİ]</ref>:
+
Turkey's national infrastructure is currently categorised by six critical sectors <ref>[http://www.resmigazete.gov.tr/eskiler/2011/10/20111018-4.htm Decree No. 2 on the Regulation Amending the Regulation on Military Forbidden Zones and Security Zones, 20-6-2013]</ref> <ref>[http://www.udhb.gov.tr/doc/siberg/2016-2019guvenlik.pdf 2016-2019 ULUSAL SİBER GÜVENLİK STRATEJİSİ]</ref>:
 
# Electronic Communication (Elektronik Haberleşme)
 
# Electronic Communication (Elektronik Haberleşme)
 
# Energy (Enerji)
 
# Energy (Enerji)
Line 450: Line 681:
 
# Transport (Ulaştırma)
 
# Transport (Ulaştırma)
 
# Banking and Finance (Bankacılık ve Finans)
 
# Banking and Finance (Bankacılık ve Finans)
−
</big><br />
+
which contain critical infrastructures pursuant to the Resolution No.2 of the Cyber Security Board dated 20/06/2013.
 +
<br/><br/>
 +
 
 +
==== [[United Arab Emirates]] ====
 +
The United Arab Emirates' national infrastructure is currently categorised by nine critical sectors <ref>[https://www.tra.gov.ae/userfiles/assets/IJP6zPkDr3.pdf الاستراتيجية الوطنية للأمن السيبراني]</ref> <ref>[https://www.tra.gov.ae/userfiles/assets/Lw3seRUaIMd.pdf Cyber Security Strategy 2019]</ref>:
 +
# Energy (الطاقة)
 +
# ICT (المعلومات الاتصالات وتقنية)
 +
# Government (القطاع الحكومي)
 +
# Electricy &amp; Water (الكهرباء والمياه)
 +
# Finance &amp; Insurance (القطاع المالي والتأمين)
 +
# Emergency Services (خدمات الطوارئ)
 +
# Health Services (الخدمات الصحية)
 +
# Transportation (المواصلات)
 +
# Food &amp; Agriculture (الغذاء والزراعة)
 +
<br/>
  
 
==== [[United Kingdom|United Kingdom (UK)]] ====
 
==== [[United Kingdom|United Kingdom (UK)]] ====
−
<big>UK's national infrastructure is categorised into nine sectors <ref> [http://www.cpni.gov.uk/about/cni/ Centre for the Protection of National Infrastructure (CPNI)]</ref>:
+
UK's national infrastructure was categorised into nine sectors, but has been extended to 13 sectors <ref>[https://www.cpni.gov.uk/critical-national-infrastructure-0 CNI at Centre for the Protection of National Infrastructure (CPNI)]</ref>:
 
# communications (telecommunications, postal services, broadcast)
 
# communications (telecommunications, postal services, broadcast)
 
# emergency services (ambulance, fire & rescue, marine, police)
 
# emergency services (ambulance, fire & rescue, marine, police)
Line 461: Line 706:
 
# government (central government, devolved administration/functions, regional and local government, parliament)
 
# government (central government, devolved administration/functions, regional and local government, parliament)
 
# health (health & social care)
 
# health (health & social care)
−
# transport (aviation, maritime, land)
+
# transport (aviation, maritime, land) and water (portable water supply, waste water services, dams)  
−
# water (portable water supply, waste water services, dams)  
+
# defence
−
</big><br />
+
# coast guard
 +
# chemicals
 +
# civil nuclear
 +
# space
 +
<br/>
  
 
==== [[United States]] ====
 
==== [[United States]] ====
−
<big>The 2009 NIPP <ref>[http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf National Infrastructure Protection Plan, Partnering to enhance protection and resiliency, US Department of Homeland Security, 2009]</ref> defines a sector as</big>
+
The 2009 NIPP <ref>[http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf National Infrastructure Protection Plan, Partnering to enhance protection and resiliency, US Department of Homeland Security, 2009]</ref> defines a sector as</big>
  
 
{{definition|a logical collection of [[asset|assets]], [[system|systems]], or [[network|networks]] that provide a common function to the economy, government, or society.}}
 
{{definition|a logical collection of [[asset|assets]], [[system|systems]], or [[network|networks]] that provide a common function to the economy, government, or society.}}
  
−
<big>Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience<ref> [http://www.whitehouse.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil Presidential Policy Directive -- Critical Infrastructure Security and Resilience, PPD-21, 2013]</ref> identifies 16 critical infrastructure sectors:
+
Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience<ref> [http://www.whitehouse.gov/the-press-office/2013/02/12/presidential-policy-directive-critical-infrastructure-security-and-resil Presidential Policy Directive -- Critical Infrastructure Security and Resilience, PPD-21, 2013]</ref> identifies 16 critical infrastructure sectors:
 
# Chemical Sector
 
# Chemical Sector
 
# Commercial Facilities Sector
 
# Commercial Facilities Sector
Line 488: Line 737:
 
#    Water and Wastewater Systems Sector
 
#    Water and Wastewater Systems Sector
  
−
Each sector falls under the responsibility of a designated [[Sector-Specific Agency (SSA)]].</big><br />
+
Each sector falls under the responsibility of a designated [[Sector-Specific Agency (SSA)]].<br /><br/>
  
 +
=====[[NIST]]=====
 +
Critical Infrastructure Sectors<ref name=NIST>[https://csrc.nist.gov/Glossary NIST Glossary - CNSSI 4009-2015 (NIST SP 800-30 Rev. 1) and NIST SP 800-30 (HSPD-7) ]</ref>:
 +
# Information technology
 +
# Telecommunications
 +
# Chemical
 +
# Transportation systems, including mass transit, aviation, maritime, ground/surface, and rail and pipeline systems
 +
# Emergency services, and
 +
# Postal and shipping.
 +
<br/>
 +
 +
==== [[Vietnam]] ====
 +
The 11 key areas (11 lĩnh vực) include <ref>[https://en.baochinhphu.vn/govt-issues-national-strategy-to-combat-new-cyber-security-challenges-111220811103436282.htm news item on new Vietnam's cybersecurity strategy]</ref>: (* 12 key areas are listed)
 +
# transport,
 +
# energy,
 +
# natural resources and environment,
 +
# information,
 +
# health,
 +
# finance,
 +
# banking,
 +
# defence,
 +
# security,
 +
# social order and safety,
 +
# urban areas, and
 +
# the Government's direction and administration.
 +
 +
==== [[Virgin Islands]] ====
 +
The Virgin Islands defined <ref>[http://www.bvi.gov.vg/pub/The%20Virgin%20Islands%20Climate%20Change%20Green%20Paper_FINAL_TO%20PRINT.pdf The Virgin Islands Climate Change Green Paper Prepared by the Conservation and Fisheries Department, Ministry of Natural Resources and Labour (2010)]</ref> their CI as:
 +
# road network,
 +
# schools,
 +
# community and emergency centres,
 +
# police and fire stations,
 +
# health facilities,
 +
# public administration buildings,
 +
# the financial centre,
 +
# airports and major hotels;
 +
# facilities and distribution systems for critical utilities including electricity, telecommunications and water as well as the sewerage system.
 +
 +
In addition to existing critical infrastructure, developable lands suited and air-marked for critical infrastructure must be considered.
 +
<br/><br />
 +
 +
=== Other Definitions ===
 +
==== [[Scotland]] ====
 +
The Scotland Act 1998 identifies those areas which are reserved and devolved. The Scottish Government fulfills the role of the Sector sponsor department (SSDI in Scotland for those sectors or sub-sectors <ref>[http://www.gov.scot/Resource/Doc/346469/0115308.pdf Secure and Resilient: A Strategic Framework for [[Critical National Infrastructure]], 2011 in Scotland]</ref>:
 +
# Defense Industrial Base Sector
 +
# Emergency Services (with the exception of MCA Security, British Transport Police and the Security Service)
 +
# Food
 +
# Devolved Scottish Government Services
 +
# Health
 +
# Water
 +
# Road Transport
 
<!--===Standard Definition===
 
<!--===Standard Definition===
 
-->
 
-->
Line 497: Line 796:
  
 
==Notes==
 
==Notes==
−
<references />
 
  
−
<!--
 
 
==References==
 
==References==
−
* Test reference. -->
+
<references />
  
 
[[Category:Infrastructure]][[Category:Sector]][[Category:Policy]]
 
[[Category:Infrastructure]][[Category:Sector]][[Category:Policy]]
−
{{#set:defined by=EU|defined by=UNISDR|defined by=Australia||defined by=Austria|defined by=Belgium|defined by=Canada|defined by=Croatia|defined by=Czech Republic|defined by=Denmark|defined by=Estonia|defined by=France|defined by=Germany|defined by=Ghana|defined by=India|defined by=Japan|defined by=Malaysia|defined by=Netherlands|defined by=New Zealand|defined by=Norway|defined by=Poland|defined by=Qatar|defined by=Republic of Slovenia|defined by=Slovenia|defined by=Republic of Korea|defined by=Republic of Trinidad & Tobago|defined by=Slovakia|defined by=Spain|defined by=Switzerland|defined by=Turkey|defined by=United Kingdom|defined by=United States}}
+
{{#set:defined by=EU|defined by=UNISDR|defined by=Argentina|defined by=Australia||defined by=Austria|defined by=Bangladesh|defined by=Belgium|defined by=Brazil|defined by=Canada|defined by=Chile|defined by=Croatia|defined by=Czech Republic|defined by=Denmark|defined by=El Salvador|defined by=Estonia|defined by=Finland|defined by=France|defined by=Germany|defined by=Ghana|defined by=India|defined by=Indonesia|defined by=Japan|defined by=Jersey|defined by=Kuwait|defined by=Malaysia|defined by=Netherlands|defined by=New Zealand|defined by=Norway|defined by=Pakistan|defined by=Papua New Guinea|defined by=Poland|defined by=Qatar|defined by=Singapore|defined by=Republic of Slovenia|defined by=Slovenia|defined by=Republic of Korea|defined by=Republic of Trinidad & Tobago|defined by=Slovakia|defined by=Spain|defined by=Switzerland|defined by=Turkey|defined by=United Arab Emirates|defined by=United Kingdom|defined by=United States|defined by=Virgin Islands|defined by=Scotland|defined by=NIST|defined by=Vietnam}}
 +
{{#set: Showmainpage=Yes}}

Revision as of 13:03, 15 August 2022

Each national or international strategy and policy identifies different categories of sectors that are considered to offer vital services and thus require protection. A 2008 survey examined the policies of 25 countries and identifies as the most frequently mentioned the following sectors, taken up later in the [1]:

  • Banking and Finance (Sektor kritične infrastrukture, ki zagotavlja finance)
  • Central Government / Government Services [?]
  • (Tele-)Communication / Information and Communication Technologies (ICT) (Sektor kritične infrastrukture, ki zagotavlja informacijsko in komunikacijsko podporo)
  • Emergency / Rescue Services [?]
  • Energy / Electricity (Sektor kritične infrastrukture, ki zagotavlja energetsko podporo)
  • Health Services (Sektor kritične infrastrukture, ki zagotavlja zdravstveno oskrbo)
  • Transportation / Logistics / Distribution (Sektor kritične infrastrukture, ki zagotavlja prometne povezave)
  • Water (supply) (Sektor kritične infrastrukture, ki zagotavlja preskrbo s pitno vodo)
  • Food (Sektor kritične infrastrukture, ki zagotavlja preskrbo s hrano)
  • Envoronmental Protection (Sektor kritične infrastrukture, ki zagotavlja varstvo okolja)

The study comments that "these are the core sectors of modern societies, and possibly the areas where a large-scale interruption would be most devastating" [2].

Definitions

European Definitions

Council Directive 2008/114/EC

The EU directive identifies the following two sectors and their respective sub-sectors [3]:

I Energy

  1. Electricity: Infrastructures and facilities for generation and transmission of electricity in respect of supply electricity
  2. Oil: Oil production, refining, treatment, storage and transmission by pipelines
  3. Gas: (a) Gas production, refining, treatment, storage and transmission by pipelines, (b) LNG terminals

II Transport

  1. Road transport
  2. Rail transport
  3. Air transport
  4. Inland waterways transport
  5. Ocean & short sea shipping and ports


Resilience of critical entities COM/2020/829 final

The EU proposed directive identifies the following sectors and their respective sub-sectors [4]:

Sector Subsector
Energy Electricity
District Heating
Oil
Gas
Hydrogen
Transport Air
Rail
Water (inland, sea, coastal passenger and freight; ports)
Road
Banking
Financial Market Infrastructures
Health
Drinking Water
Waste Water
Digital Infrastructure (IX, DSN, TLD, Cloud, Data centre service, Content delivery, Trust services, NIS Directive)
Public Administration
Space (ground-based infrastructure)


Other International Definitions

UNISDR

UNISDR presents the following examples of critical infrastructures:

transport systems, air and sea ports, electricity, water and communications systems, hospitals and health clinics, and centres for fire, police and public administration services. [5]



National Definitions

Argentina

Líneas vitales/Infraestructuras críticas SUBSECRETARÍA DE PROTECCIÓN CIVIL Y ABORDAJE INTEGRAL DE EMERGENCIAS Y CATÁSTROFES (1/2015):

  1. Energía: presas, subestaciones, líneas de fluido eléctrico, plantas de almacenamiento de combustibles, oleoductos, gasoductos.
  2. Transporte: redes viales, puentes, terminales de transporte, aeropuertos, puertos fluviales y marítimos.
  3. Agua: plantas de tratamiento, acueductos, alcantarillados, canales de irrigación y conducción.
  4. Comunicaciones: redes y plantas telefónicas, estaciones de radio y televisión, oficinas de correo e información pública.



Australia

Australia's national critical infrastructure is categorised by seven critical sectors [6]:

  1. Energy
  2. Water services
  3. Communications
  4. Transport
  5. Food Chain
  6. Health
  7. Banking & Finance


Austria

Austria's national critical infrastructure is categorised by thirteen critical sectors [7]:

  1. Energy
  2. ICT
  3. Water
  4. Food
  5. Health
  6. Finance
  7. Transport
  8. Chemical industry
  9. Research
  10. Constitutional institutions
  11. Social system
  12. Distribution system
  13. Search and Rescue


Bangladesh

Bangladesh Critical Infrastructure is categorised by seven critical sectors [8]:

  1. Energy (oil, gas)
  2. Telecommunications
  3. Transport (road)
  4. Monuments/Buildings
  5. Water
  6. Financial sector
  7. ICT


Belgium

Belgium's National Critical Infrastructure is categorised by four critical sectors [9]:

  1. Energy (electric power, oil, gas)
  2. Transport (road, rail, air, inland shipping, sea and ocean shipping & harbours)
  3. Financial sector
  4. Electronic Communication

Although another law applies, the Space sector is likewise treated as a Critical Infrastructure.

Brazil

[CII] Setor: representa um segmento de Infraestrutura Crítica que pode compreender subsetores.
Subsetor: é um nível de especialização de um segmento de Infraestrutura Crítica, constituído por organizações privadas ou públicas responsáveis pelos ativos de informação para os quais serão definidos controles a fim de atender requisites mínimos de segurança.[10]



Canada

Canada's national infrastructure is categorised by ten critical sectors [11]:

  1. Health
  2. Food
  3. Finance
  4. Water
  5. Information and Communication Technology
  6. Safety
  7. Energy and utilities
  8. Manufacturing
  9. Government
  10. Transportation


Chile

Chile's national critical information infrastructure is categorised by the following critical sectors: [12] [13]}}

  1. energía (energy)
  2. telecomunicaciones (telecommunications)
  3. agua (water)
  4. salud (health)
  5. servicios financieros (financial services)
  6. seguridad pública (public safety)
  7. transporte (transport)
  8. administración pública (civil service)
  9. protección civil (civil protection)
  10. defense(defence)


Croatia

Potentially eleven Critical Infrastructure Sectors have been identified by [14]:

  1. Energetika - Energy (production, including reservoirs and dams, transmission, storage, transportation fuels and energy distribution systems)
  2. Komunikacijska i informacijska tehnologija - Communication and information technology (electronic communication, data transmission, information systems, providing audio and audiovisual media services)
  3. Promet - Transport (road, rail, air, sea and inland waterway)
  4. Zdravstvo - Public Health (health care, manufacturing, marketing and supervision of medicinal products)
  5. Vodno gospodarstvo - Water Management (control and protective water structures and municipal water structures)
  6. Hrana - Food (production and food supply and food safety system, stockpiles)
  7. Financije - Finance (banking, stock exchanges, investment, insurance and payment systems)
  8. Proizvodnja, skladištenje i prijevoz opasnih tvari - Production, storage and transport of dangerous goods (chemical, biological, radiological and nuclear materials)
  9. Javne službe - Public sector (insurance of public order, protection and rescue, emergency medical services)
  10. Nacionalni spomenici i vrijednosti - National monuments and valuables
  11. Science and Education


Czech Republic

Czech Republic's national critical infrastructure is categorised by nine critical sectors [15]:

  1. Energy
  2. Water management
  3. Food industry and agriculture
  4. Health services
  5. Transport
  6. Communication and information systems
  7. Financial market and currency
  8. Emergency Services
  9. Public administration


Denmark

Denmark defined critical societal functions instead of critical sectors[16] [17]:

  1. Energy: Supply of electricity, natural gas, crude oil, fuel, etc.
  2. Information and communications technology (ICT): Phone, internet, information networks, processing and transmission of data, navigation, satellite/radio/TV transmission, post and courier services, etc.
  3. Transport: Carrying out, monitoring and controlling passenger and cargo transport (road, rail, air and sea), monitoring and controlling of infrastructure (bridges, tunnels, stations, airports, harbours), etc.
  4. Water: Supply of drinking water and waste water disposal.
  5. Food: Supply of food, supervision of food safety, monitoring and responding to contagious animal diseases and zoonoses.
  6. Finance: Money transmission and transfer services, banking and insurance, securities trading, etc.
  7. Fire and rescue services, police tasks, military assistance to civil authorities, etc.: # Alarming and alerting, on-scene coordinating and technical incident command, cordoning off, fire fighting, search and rescue (land/sea/air), evacuation (incl. reception, housing and catering), environmental pollution response, storm surge preparedness, snow-preparedness, public order enforcement, explosive ordnance disposal, control of production, storage and transport of hazardous materials (chemical, biological, radiological, nuclear, explosive), and response to incidents that do or may involve hazardous materials.
  8. Health and social services: Prehospital services, hospitals, practising physicians, production and distribution of pharmaceuticals, supervisory systems, day-care and residential institutions, home care, etc.
  9. Defence, intelligence and security services: Military defence and enforcement of sovereignty, counter-terrorism, counter-extremism, counter-espionage, personal protection, etc.
  10. Exercise of authority (all levels): Crisis management capacity, maintenance of parliamentary, governmental, central administrative, judicial, municipal and regional authority.


El Salvador

El Salvador's basic and essential infrastructure is categorised by four sectors [18]:

  1. Energía: presas, subestaciones, líneas de fluido eléctrico, plantas de almacenamiento de combustibles, oleoductos, gasoductos.
  2. Transporte: redes viales, puentes, terminales de transporte, aeropuertos, puertos fluviales y marítimos.
  3. Agua: plantas de tratamiento, acueductos, alcantarillados, canales de irrigación y conducción.
  4. Comunicaciones: redes y plantas telefónicas, estaciones de radio y televisión, oficinas de correo e información publica.


Or:

  1. Energy: dams, substations, electric fluid lines, fuel storage plants, oil pipelines, pipelines.
  2. Transport: road networks, bridges, transport terminals, airports, river and maritime ports.
  3. Water: treatment plants, aqueducts, sewage systems, irrigation canals and conduction.
  4. Communications: networks and telephone plants, radio and television stations, post offices and public information.


Estonia

Estonia's critical infrastructure is categorised by nine critical sectors [19]:

  1. Energy facilities and networks: electricity, oil and gas storage facilities and refineries, transmission and distribution systems
  2. Communications and information technology: telecommunications, transmission and notification systems, software, hardware and networks, including the infrastructure of the Internet
  3. Finance: banking, securities and investment
  4. Health care: hospitals, health care facilities, laboratories and medicines, search, rescue and ambulance services
  5. Food: safety, means of production, wholesale and food industry
  6. Water: water reservoirs, water treatment plants and water networks
  7. Transport: airports, ports, inter-modal transport facilities, rail and mass transit networks, traffic control systems
  8. Production, storage and transport of dangerous goods: chemical, biological, radiological and other hazardous materials
  9. State agencies: critical services, facilities, information networks; information systems ensuring national security and defence, resources, databases and court registers with legal effect, and national cultural assets.


Finland

In 2010, Finland defined the following set of vital functions [20] (Suomalaisen yhteiskunnan elintärkeitä toimintoja ovat) [21]:

  1. management of Government affairs (valtion johtamine)
  2. international activity (kansainvälinen toiminta)
  3. Finland’s defence capability (Suomen puolustuskyky)
  4. internal security (sisäinen turvallisuus)
  5. functioning of the economy and infrastructure (talouden ja infrastruktuurin toimivuus)
  6. the population’s income security and capability to function (väestön toimeentuloturva ja toimintakyky), and
  7. psychological resilience to crisis (henkinen kriisinkestävyys)


France

A critical infrastructure sector is defines as follows:

Secteur d’activités d’importance vitale (SAIV): secteur constitué d’activités concourant à un même objectif: qui ont trait à la production et la distribution de biens ou de services indispensables à la satisfaction des besoins essentiels pour la vie des populations, ou à l’exercice de l’autorité de l’État, ou au fonctionnement de l’économie, ou au maintien du potentiel de défense, ou à la sécurité de la nation, dès lors que ces activités sont difficilement substituables ou remplaçables; ou qui peuvent présenter un danger grave pour la population. [22]

An unofficial translation follows:

Sector consists of activities contributing to a same objective: related to the production and distribution of goods or services essential to satisfy the basic needs of the population, or related to the exercise of state authority or the functioning of the economy, or the upkeep of the defence capacity, or the security of the nation, since these activities are difficult to substitute or replace; or that may seriously affect the health or life of the population.

Below a list of the sectors and the responsible ministry can be found. [23] [24].

Critical Sector Responsible Ministry
Civilian activities Ministry of Home Affairs
Legal activities Ministry for Justice
Military activities of the State Ministry of Defence
Food Ministry for Agriculture
Communication, technologies and broadcasting Ministry for Electronic communications
Energy Ministry for Energy
Space and Research Ministry of Research
Finance Ministry of the Economy and Finance
Water management Ministry for Ecology
Industry Ministry for Industry
Health Ministry of Health
Transport Ministry of Transport


Germany

In Germany, the following sectors (and industries) are assigned to critical infrastructures [25]:

  1. Transport and traffic (aviation, maritime shipping, inland waterway transport, rail traffic, road traffic, logistics)
  2. Energy (electricity, mineral oil, gas)
  3. Information technology and telecommunication (telecommunication, information technology)
  4. Finance and insurance sector (banks/financial institutes, insurance companies, financial service providers, stock exchanges)
  5. State and administration (government and administration, parliament, judicial institutions, emergency and rescue services including disaster control)
  6. Food (food industry, food trade)
  7. Water (public water supply, public waste water disposal)
  8. Health (medical care, pharmaceuticals and vaccines, laboratories)
  9. Media and culture (broadcasting (television and radio), printed and electronic press, cultural assets, highly symbolic buildings)


In Deutschland werden folgende Sektoren (und Branchen) den Kritischen Infrastrukturen zugeordnet:

  1. Transport und Verkehr (Luftfahrt, Seeschifffahrt, Binnenschifffahrt, Schienenverkehr, Straßenverkehr, Logistik)
  2. Energie (Elektrizität, Mineralöl, Gas)
  3. Informationstechnik und Telekommunikation (Telekommunikation, Informationstechnik)
  4. Finanz- und Versicherungswesen (Banken, Versicherungen, Finanzdienstleister, Börsen)
  5. Staat und Verwaltung (Regierung und Verwaltung, Parlament, Justizeinrichtungen, Notfall- und Rettungswesen einschließlich Katastrophenschutz)
  6. Ernährung (Ernährungswirtschaft, Lebensmittelhandel)
  7. Wasser (Öffentliche Wasserversorgung, öffentliche Abwasserbeseitigung)
  8. Gesundheit (Medizinische Versorgung, Arzneimittel und Impfstoffe, Labore)
  9. Medien und Kultur (Rundfunk (Fernsehen und Radio), gedruckte und elektronische Presse, Kulturgut, symbolträchtige Bauwerke)

Ghana

Ghana defines the following ten sectors to be part of their Critical National Infrastructure [26]:

  1. National Defense and Security
  2. Banking and Finance
  3. Information and Communications
  4. Energy
  5. Transportation
  6. Water
  7. Health Services
  8. Government
  9. Emergency Services
  10. Food and Agriculture


India

Critical sectors means sectors which are critical to the nation and whose incapacity or destruction will have a debilitating impact on national security, economy, public health or safety. [27]

The sectors that have been designated as critical are: [28]

  1. Defence
  2. Banking and financial sector
  3. ICT and telecommunication
  4. Transportation
  5. Power
  6. Energy
  7. Ministry of Home Affairs
  8. Ministry of External Affairs
  9. Ministry of Heavy Industries
  10. Niti Ayog (the erstwhile Planning Commission)


However, in 2015 the NCIIPC [29] presented the following list of critical sectors:

  1. Energy
  2. Transportation (air, surface, rail & water)
  3. Banking & Finance
  4. Telecommunication
  5. Defence
  6. Space
  7. Law enforcement, security & intelligence
  8. Sensitive Government organisations
  9. Public Health
  10. Water supply
  11. Critical manufacturing
  12. E-Governance


Indonesia

Infrastruktur kritis nasional yakni infrastruktur pada sektor-sektor [30]:

  1. Energi (energy)
  2. Transportasi (transport)
  3. keuangan dan perbankan (finances and banking)
  4. telekomunikasi (telecommunication)
  5. pertahanan (defence)
  6. penegakan hokum (law enforment)
  7. keamanan dan intelijen (security and intelligence services)
  8. kesehatan (health)
  9. suplai air (drinking water)
  10. tata kelola elektronik (e-Governance)
  11. industri kritis (critical industry)
  12. organisasi-orgaisasi sensitif (sensitive organisations)
  13. dan luar angkasa (space)


Japan

Japan's national critical infrastructure is categorised by thirteen critical sectors: [31], [32], [33]:

  1. Information and communication services (情報通信)
  2. Financial services (金融)
  3. Aviation services (航空)
  4. Railway services (鉄道)
  5. Electric power supply services (電力)
  6. Gas supply services (ガス)
  7. Government and administrative services (including local public authorities)
    (政府・行政サービス（地方公共団体を含む）)
  8. Medical services (医療)
  9. Water services (水道)
  10. Logistics services (物流)
  11. Chemical industries (化学)
  12. Credit card services (クレジット)
  13. Petroleum industries (び「石油)


Jersey

Jersey's critical national infrastructure is categorised by the following eight critical sectors: [34]

  1. Electricity
  2. Gas
  3. Communications
  4. Transport (including Ports and Airport)
  5. Emergency services
  6. Public services
  7. Health
  8. Water


Kuwait

Kuwait's critical national infrastructure is categorised by the following eight vital sectors: [35],[36]

  1. Oil sector القطاع النفطي
  2. Military sector القطاع الع�صكري
  3. Energy sector and electricity and water قطاع الطاقة والكهرباء واملاء.
  4. Financial sector القطاع املايل.
  5. Communications, telecommunication and information technology sector قطاع االت�صاالت وتكنولوجيا املعلومات.
  6. Transport sector قطاع النقل.
  7. Health sector القطاع ال�صحي.
  8. Other government entities .اجلهات احلكومية الأخرى.


Malaysia

Malaysia's National Critical Information Infrastructure (CNII):[37]

  1. National Defence & Security
  2. Banking & Finance
  3. Information & Communications
  4. Energy
  5. Transportation
  6. Water
  7. Health Services
  8. Government
  9. Emergency Services
  10. Food & Agriculture


Netherlands

The 2015 Critical Infrastructure review redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the Critical Infrastructure table below were announced [38] [39]. Later, road and rail transport were added (again).

Critical Processes Category Product, service or location Sector Responsible Ministry
National transport and distribution of power A Electricity Energy Economic Affairs and Climate Policy
Regional distribution of electricity B
Gas production
National transport and distribution of gas		 A Gas
Regional distribution of gas B
Oil supply A Oil
Internet and data services B Internet and data services ICT/Telecom
Internet access and data traffic B Internet access and data traffic
Voice services and text messaging B Voice services and text messaging
Geolocation and time information by GNSS B GNSS Infrastructure and Water Management
Drinking water supply A Drinking water Drinking water
Flood defences and water management A (part of) primary flood defences, regional flood defences Water
Air Traffic B Air Traffic Control (ATC) and aircraft handling Transport
Vessel Traffic Service B Vessel Traffic Service (Port of Rotterdam)
Transport of persons and goods by (main) railway infrastructure B Main rail infrastructure
Transport by (main) road infrastructure B Main road infrastructure (highways, key tunnels and bridges)
Large-scale production/processing and/or storage of chemicals and petrochemicals B Chemical and petrochemical industry Chemistry
Storage, production and processing of nuclear materials A Nuclear Nuclear
Retail transactions B Financial transactions Financial Finance
Consumer financial transactions B
High-value transactions between banks B
Securities trading B
Emergency Services communication (1-1-2 and C2000) B Communication with and between emergency services through the 112 emergency number and C2000 Public order and Safety (OOV) Justice and Security
Police Deployment B
Personal and organisational record databases B Digital government Public Administration The Interior and Kingdom Relations
Interconnectivity between record databases B
Electronic messaging and information disclosure to citizens B
Identification and authentication of citizens and organisations B
Military deployment B Military deployment Armed Forces Defence Defence


The Netherlands' national infrastructure was (2005 definition) categorised by twelve critical sectors and 31 subsectors [40]:

  1. Energy: electric power, gas, and oil
  2. Telecommunications and IT: fixed and mobile communications, radio, broadcasting, internet, and postal and courier services
  3. Drinking water (supply)
  4. Food: food supply, and food safety
  5. Health: emergency and other hospital care, medicines, and vaccines
  6. Financial services: payments (bank retail), and financial transfers by the Administration
  7. Surface water: water quality and water quantity (stemming and managing)
  8. Public order and safety
  9. Legal order/justice: courts and detention, and law enforcement
  10. Public administration: diplomacy, information services by the Administration, defence, and decision-making
  11. Transport: mainport Schiphol, mainport Rotterdam, main road infrastructure, main inland shipping infrastructure, and rail infrastructure
  12. Chemical and nuclear industry: transport, storage, production, and processing of dangerous materials

Each critical sector falls under the responsibility of a designated ministry.

Vitale sector: Een publiek en/of private groep organisaties en bedrijven die producten, goederen of diensten leveren en/of beheren, die als kritisch zijn benoemd voor de handhaving van de vitale belangen of vitale infrastructuur van Nederland. [41]



North Macedonia

New Macedonia recognises five critical infrastructure sectors:

  1. Energy (production, transmission and distribution)
  2. Water supply
  3. Environment
  4. Macedonian radio and television, electronic and print media
  5. National bank of North Macedonia and other registered legal banking entities

Norway

Norway distinguishes six critical infrastructures and eleven critical societal functions. Critical infrastructures:

  1. Electric Power (kraft)
  2. Electronic communications (elektronisk kommunikasjon)
  3. Water supply and Sewage (vann og avløp)
  4. Transport (transport)
  5. Oil and Gas (olje og gass)
  6. Satellite-based infrastructure (satellittbasert kommunikasjon og navigasjon)

In 2006, three additional critical sectors existed, which have shifted to critical societal functions later [42]:

  1. Banking and Finance (bank og finans)
  2. Monuments and symbols (kulturminner og symboler)
  3. Food Supply (matforsyning)

Critical Societal Functions (Kritisk samfunnsfunksjon er det mest sentrale begrepet i definisjonsapparatet):

  1. Banking and Finance (bank og finans)
  2. Food Supply (matforsyning)
  3. Health Services, Social Services and Social Security Benefit (helse-, sosial- og trygdetjenester)
  4. Police (politi)
  5. Emergency and Rescue Services (nød- og redningstjeneste)
  6. Crisis Management (kriseledelse)
  7. Parliament and Government (storting og regjering)
  8. The Judiciary (domstolene)
  9. Defence (forsvaret)
  10. Environmental Surveillance (miljøovervåkning)
  11. Waste Treatment (renovasjon)


Pakistan

Critical Sector - Government systems, utility infrastructure (electricity, gas, and water), education, health, transport system (air, road, rail, and sea), emergency services, manufacturing facilities, banking and financial sector, telecommunication/ ICT sector, dams, etc. [43]



Papua New Guinea

Critical Infrastructure[44] at least:

  1. transportation
  2. communication systems
  3. water supply
  4. electricity supply
  5. banking services
  6. public institutions including health services, post offices and education services.

Poland

Poland distinguishes the following critical infrastructure sectors / functions: [45]

  1. Banking and financial systems (finansowe)
  2. Health (ratownicze)
  3. Communication and computer systems (łączności, sieci teleinformatycznych)
  4. Transport (transportowe)
  5. Rescue systems (ochrony zdrowia)
  6. Systems ensuring functioning of the public administration (zapewniające ciągłość działania administracji publicznej)
  7. Food and water provision systems (zaopatrzenia w żywność & zaopatrzenia w wodę)
  8. Energy and fuel provision systems (zaopatrzenia w energię, surowce energetyczne i paliwa)
  9. Systems that deal with the production, use, storage of chemical and radioactive substances, and also dangerous substance pipelines (produkcji, składowania, przechowywania i stosowania substancji chemicznych i promieniotwórczych, w tym rurociągi substancji niebezpiecznych)
  10. ensuring the continuity of public administration (zapewniające ciągłość działania administracji publicznej).


Qatar

The critical sectors which comprise Qatar's national critical infrastructure include but are not restricted to [46] [47] :

  1. Energy, Electricity, and Water (قطاع الطاقة والكهرباء والماء)
  2. Finance (القطاع الما ي ل)
  3. Government (القطاع الحكومي)
  4. Healthcare (قطاع الرعاية الصحية)
  5. Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
  6. Transportation (قطاع النقل والمواصلات)


Republic of Korea

Nine critical sectors comprise the Republic of Korea's national critical infrastructure [48]:

  1. Energy
  2. Telecommunications
  3. Transportation
  4. Financials services
  5. Healthcare and medical services
  6. Nuclear energy
  7. Environment
  8. Government critical facilities
  9. Water Supply


Republic of Trinidad & Tobago

The national cyber security strategy recognizes the following critical (information) infrastructure sectors [49]:

  1. Banking and financial services
  2. Communications infrastructure
  3. Public health
  4. Public safety
  5. Public transportation
  6. Key infrastructure


Singapore

Singapore recognises the following eight CI sectors: [50]

  1. Energy
  2. Banking and Finance
  3. Healthcare
  4. Transport (which includes Land, Maritime, and Aviation)
  5. Government
  6. Information and communication
  7. Media
  8. Security & Emergency Services



Slovakia

Critical infrastructure sector: part of the critical infrastructure, to be integrated into devices; sector may contain one or more sub-sectors.

Sektorom kritickej infraštruktúry časť kritickej infraštruktúry, do ktorej sa zaraďujú prvky; sektor môže obsahovať jeden alebo viac podsektorov kritickej infraštruktúry (ďalej len „podsektor“). [51]


Slovakia recognises nine critical sectors: [52]

  1. Energy (Energetika)
  2. Transport (Doprava)
  3. Food (Potraviny)
  4. Drinking water (Voda)
  5. Health (Zdravie)
  6. Financial sector (Finančný sector)
  7. Information and communication (Informačné a komunikačné technológie)
  8. Public Order and Internal Security (Verejný poriadok a vnútorná bezpečnosť)
  9. Industry (Priemysel)


Slovenia

Sectors Critical Infrastructure of the Republic of Slovenia [53]:

  1. Energy (more than 7 days to rehabilitate; power disruption for more than 100.000 people; interruption petroleum and gas products for more than a week affecting over 100.000 people and costs in the amount of 10 M Euro/day)
  2. Transportation (disable rail traffic on key routes for more than a couple of weeks and damages of 10 M Euro/day)
  3. Food (unable to provide basic food products for a week for over 100.000 people)
  4. Drinking water (unable to provide drinking water for a week for over 100.000 people)
  5. Health / Medical care (unable to provide emergency care and public health services for over 100.000 people)
  6. Finance (unable to provide money supply for more than 3 days in an area of more than 50,000 people)
  7. Environmental protection (pollution with a short-term harmful effect on the population in an area of over 50,000 people)
  8. Communications and Information Technologies


Spain

Spains' national infrastructure is currently categorised by twelve critical sectors[54]:

  1. Administration
  2. Chemical Industry
  3. Energy
  4. Financial and Tax System
  5. Food Supply Chain
  6. Health
  7. Information and Communication Technologies (ICT)
  8. Nuclear Industry
  9. Research Laboratories
  10. Space
  11. Transport
  12. Water


Sweden

Swedens' national infrastructure is currently categorised by eleven critical sectors providing a set of critical societal functions [55]:

  1. Energy Supply
  2. Information and Communication Technologies (ICT)
  3. Financial Services
  4. Social Insurances
  5. Public Health, medical services and special social services
  6. Protection, Security and Safety
  7. Transport
  8. Municipal Services
  9. Food
  10. Trade and Industry
  11. Public Administration (governance, support functions, service sector)


Switzerland

Switzerlands' national infrastructure is currently categorised by ten critical sectors and 28 subsectors which are subcategorised very high critical, high critical and regular critical [56]:

  1. Energy: natural gas supply, oil supply, and power supply
  2. Financial services: banks, and insurance companies
  3. Information- & communication technologies (ICT): information technology, media, and telecommunication
  4. Industry: chemical and pharmaceutical industry, and mechanical and electrical engineering industries
  5. Public administration: foreign representations and headquarters of international organisations; national cultural property; parliament, government, justice, administration; research institutes
  6. Public health: medical care and hospitals; laboratories
  7. Public safety: armed forces, civil defense, emergency organizations (police, fire service, emergency medical service and rescue services)
  8. Transport: air transport, water transport, postal services, rail transport, road transport
  9. Water and food: food supply, drinking water supply
  10. Waste disposal: waste, waste water


Turkey

Turkey's national infrastructure is currently categorised by six critical sectors [57] [58]:

  1. Electronic Communication (Elektronik Haberleşme)
  2. Energy (Enerji)
  3. Water management (Su Yönetimi)
  4. Critical Public Services (Kritik Kamu Hizmetleri)
  5. Transport (Ulaştırma)
  6. Banking and Finance (Bankacılık ve Finans)

which contain critical infrastructures pursuant to the Resolution No.2 of the Cyber Security Board dated 20/06/2013.

United Arab Emirates

The United Arab Emirates' national infrastructure is currently categorised by nine critical sectors [59] [60]:

  1. Energy (الطاقة)
  2. ICT (المعلومات الاتصالات وتقنية)
  3. Government (القطاع الحكومي)
  4. Electricy & Water (الكهرباء والمياه)
  5. Finance & Insurance (القطاع المالي والتأمين)
  6. Emergency Services (خدمات الطوارئ)
  7. Health Services (الخدمات الصحية)
  8. Transportation (المواصلات)
  9. Food & Agriculture (الغذاء والزراعة)


United Kingdom (UK)

UK's national infrastructure was categorised into nine sectors, but has been extended to 13 sectors [61]:

  1. communications (telecommunications, postal services, broadcast)
  2. emergency services (ambulance, fire & rescue, marine, police)
  3. energy (electricity, gas, fuel)
  4. financial services (payment, clearing & settlement systems, market & exchange, public finances)
  5. food (production, processing, import, distribution, retail)
  6. government (central government, devolved administration/functions, regional and local government, parliament)
  7. health (health & social care)
  8. transport (aviation, maritime, land) and water (portable water supply, waste water services, dams)
  9. defence
  10. coast guard
  11. chemicals
  12. civil nuclear
  13. space


United States

The 2009 NIPP [62] defines a sector as

a logical collection of assets, systems, or networks that provide a common function to the economy, government, or society.

Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience[63] identifies 16 critical infrastructure sectors:

  1. Chemical Sector
  2. Commercial Facilities Sector
  3. Communications Sector
  4. Critical Manufacturing Sector
  5. Dams Sector [64]
  6. Defense Industrial Base Sector
  7. Emergency Services Sector
  8. Energy Sector
  9. Financial Services Sector
  10. Food and Agriculture Sector
  11. Government Facilities Sector
  12. Healthcare and Public Health Sector
  13. Information Technology Sector
  14. Nuclear Reactors, Materials, and Waste Sector
  15. Transportation Systems Sector
  16. Water and Wastewater Systems Sector

Each sector falls under the responsibility of a designated Sector-Specific Agency (SSA).

NIST

Critical Infrastructure Sectors[65]:

  1.  Information technology
  2. Telecommunications
  3. Chemical
  4. Transportation systems, including mass transit, aviation, maritime, ground/surface, and rail and pipeline systems
  5. Emergency services, and
  6. Postal and shipping.


Vietnam

The 11 key areas (11 lĩnh vực) include [66]: (* 12 key areas are listed)

  1. transport,
  2. energy,
  3. natural resources and environment,
  4. information,
  5. health,
  6. finance,
  7. banking,
  8. defence,
  9. security,
  10. social order and safety,
  11. urban areas, and
  12. the Government's direction and administration.

Virgin Islands

The Virgin Islands defined [67] their CI as:

  1. road network,
  2. schools,
  3. community and emergency centres,
  4. police and fire stations,
  5. health facilities,
  6. public administration buildings,
  7. the financial centre,
  8. airports and major hotels;
  9. facilities and distribution systems for critical utilities including electricity, telecommunications and water as well as the sewerage system.

In addition to existing critical infrastructure, developable lands suited and air-marked for critical infrastructure must be considered.

Other Definitions

Scotland

The Scotland Act 1998 identifies those areas which are reserved and devolved. The Scottish Government fulfills the role of the Sector sponsor department (SSDI in Scotland for those sectors or sub-sectors [68]:

  1. Defense Industrial Base Sector
  2. Emergency Services (with the exception of MCA Security, British Transport Police and the Security Service)
  3. Food
  4. Devolved Scottish Government Services
  5. Health
  6. Water
  7. Road Transport

See also

Notes

References

  1. ↑ 80200-1/2012/5 (2012)
  2. ↑ E. Brunner, M. Suter, International CIIP Handbook 2008/2009: An Inventory of 25 National and 7 International Critical Information Infrastructure Protection Policies, A. Wenger, V. Mauer, M. Dunn (Eds.), CRN Handbooks, Vol. 4, no. 1, Center for Security Studies (CSS), Zurich, Switzerland, September 2008.
  3. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  4. ↑ Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the resilience of critical entities COM/2020/829 final
  5. ↑ 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.
  6. ↑ Critical Infrastructure Resilience Strategy
  7. ↑ APCIP
  8. ↑ Commonwealth Telecommunication Organisation, Critical Information Infrastructure Protection (CIIP) workshops 2014
  9. ↑ Service Public Fédéral Intérieur/Federale Overheidsdienst Binnenlandse Zaken F./N. 2011-1799; C-2011/00399 (2011)
  10. ↑ GUIA DE REFERÊNCIA PARA A SEGURANÇA DAS INFRAESTRUTURAS CRÍTICAS DA INFORMAÇÃO
  11. ↑ Public Safety Canada - Critical Infrastructure
  12. ↑ Chile Política Nacional de Ciberseguridad (2017)
  13. ↑ Chilean National Cybersecurity Policy (2017)
  14. ↑ Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)
  15. ↑ Crisis management act
  16. ↑ National Risk Profile, DEMA, 2013.
  17. ↑ Nationalt Risikobillede (NRB), Beredskabsstyrelsen, 2013.
  18. ↑ Glosario de Riesgo, Ministerio de Medio Ambiente y Recursos Naturales, El Salvador
  19. ↑ Cyber Security Strategy, Min. of Defence, Tallinn (2008)
  20. ↑ Security Strategy for Society, Government Resolution 16.12.2010
  21. ↑ Yhteikunnan Turvallisuusstrategia, Valtioneuvoston periaatepäätös 16.12.2010
  22. ↑ INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J
  23. ↑ Arrêté du 3 juillet 2008 portant modification de l’arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0156 du 5 juillet 2008, NOR : PRMD0813724A.
  24. ↑ Arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0129 du 4 juin 2006, NOR : PRMX0609332A
  25. ↑ Unpublished working glossary of UP KRITIS and BSI, 2014
  26. ↑ Republic of Ghana - National Cyber Security Policy & Strategy (2015)
  27. ↑ G.S.R 19 (E) dated 16.01.2014-Information Technology (National critical Information Infrastructure Protection centre and manner of performing function and duties) Rules, 2013
  28. ↑ Guidelines for the Protection of Critical Information Infrastructure, Version 1.0, June 2013. New Delhi: NCIIPC, p. 1.
  29. ↑ workshop presentation by the NATIONAL CRITICAL INFORMATION INFRASTRUCTURE PROTECTION CENTRE (NCIIPC), 2015
  30. ↑ Melindungi Infrastruktur Kritis Nasional dari Serangan Cyber: Perspektif Kebijakan Ketahanan Nasional
  31. ↑ 重要インフラの情報セキュリティ対策に係る 第４次行動計画 (2018)
  32. ↑ The Cybersecurity Policy for Critical Infrastructure Protection (4th Edition) (Tentative Translation) (2018)
  33. ↑ Cyber Security Strategy (2013)
  34. ↑ Jersey's Digital Policy Framework (2016)
  35. ↑ الاستراتيجية الوطنية للأمن السيبراني لدولة الكويت (2017-2020)
  36. ↑ National Cyber Security Strategy 2017-2020
  37. ↑ Malaysia (2009)
  38. ↑ Voortgangsbrief Nationale Veiligheid 2016
  39. ↑ Factsheet Resilient critical infrastructure, NCTV, Netherlands
  40. ↑ Bescherming Vitale infrastructuur (2010)
  41. ↑ Handreiking Cybercrime (2012)
  42. ↑ Norwegian Official Report: Når sikkerhet er viktigst - Beskyttelse av landets kritiske infrastrukturer og kritiske samfunnsfunksjoner. Department of Justice and Public Security . NOU 2006:6
  43. ↑ National Cyber Security Policy 2021
  44. ↑ Papua New Guinea Criminal code act 2016
  45. ↑ INFRASTRUKTURA KRYTYCZNA webpage
  46. ↑ QATAR National Cyber Security Strategy (May 2014)
  47. ↑ الاستراتيجية الوطنية للأمن السيبراني QATAR National Cyber Security Strategy - Arabic version (May 2014)
  48. ↑ Act on the Protection of Information and Communications Infrastructure. Korea Act No.11690, 2013.
  49. ↑ Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)
  50. ↑ (draft) Cybersecurity Bill 2017
  51. ↑ Act no. 45/ 2011 Col. On Critical Infrastructure
  52. ↑ Národný program pre ochranu a obranu kritickej infraštruktúry v Slovenskej republike
  53. ↑ Osnovni in sektorski kriteriji kritičnosti za določanje kritične infrastructure državnega pomena v Republiki Sloveniji (2012)
  54. ↑ CNPIC
  55. ↑ Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure, Swedish Civil Contingencies Agency (MSB) (2014).
  56. ↑ The Swiss Programme on Critical Infrastructure Protection - factsheet
  57. ↑ Decree No. 2 on the Regulation Amending the Regulation on Military Forbidden Zones and Security Zones, 20-6-2013
  58. ↑ 2016-2019 ULUSAL SİBER GÜVENLİK STRATEJİSİ
  59. ↑ الاستراتيجية الوطنية للأمن السيبراني
  60. ↑ Cyber Security Strategy 2019
  61. ↑ CNI at Centre for the Protection of National Infrastructure (CPNI)
  62. ↑ National Infrastructure Protection Plan, Partnering to enhance protection and resiliency, US Department of Homeland Security, 2009
  63. ↑ Presidential Policy Directive -- Critical Infrastructure Security and Resilience, PPD-21, 2013
  64. ↑ Note: The Dams Sector comprises dam projects, navigation locks, levees, hurricane barriers, mine tailings impoundments, and other similar water retention and/or control facilities. Dams are vital to the nation's infrastructure and provide a wide range of economic, environmental, and social benefits, including hydroelectric power, river navigation, water supply, flood control, and recreation.
  65. ↑ NIST Glossary - CNSSI 4009-2015 (NIST SP 800-30 Rev. 1) and NIST SP 800-30 (HSPD-7)
  66. ↑ news item on new Vietnam's cybersecurity strategy
  67. ↑ The Virgin Islands Climate Change Green Paper Prepared by the Conservation and Fisheries Department, Ministry of Natural Resources and Labour (2010)
  68. ↑ Secure and Resilient: A Strategic Framework for Critical National Infrastructure, 2011 in Scotland


Retrieved from "https://websites.fraunhofer.de/CIPedia/index.php?title=Critical_Infrastructure_Sector&oldid=12874"