Difference between revisions of "Critical Infrastructure Sector"

From CIPedia
Jump to navigation Jump to search
(→‎Netherlands)
(→‎Netherlands)
Line 217: Line 217:
  
 
==== [[Netherlands]] ====
 
==== [[Netherlands]] ====
−
The 2015 [[Critical Infrastructure]] review <ref>https://www.nctv.nl/actueel/nieuws/kabinet-versterkt-crisisbeheersing.aspx?cp=126&cs=59950 Voortgangsbrief nationale veiligheid 9 april 2015</ref> redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the [[Critical Infrastructure]] table below were announced <ref>https://www.rijksoverheid.nl/binaries/rijksoverheid/documenten/kamerstukken/2016/09/16/voortgangsbrief-nationale-veiligheid/TK+Voortgangsbrief+Nationale+Veiligheid.pdf Voortgangsbrief Nationale Veiligheid 2016</ref>.   
+
The 2015 [[Critical Infrastructure]] review <ref>[https://www.nctv.nl/actueel/nieuws/kabinet-versterkt-crisisbeheersing.aspx?cp=126&cs=59950 Voortgangsbrief nationale veiligheid 9 april 2015]</ref> redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the [[Critical Infrastructure]] table below were announced <ref>[https://www.rijksoverheid.nl/binaries/rijksoverheid/documenten/kamerstukken/2016/09/16/voortgangsbrief-nationale-veiligheid/TK+Voortgangsbrief+Nationale+Veiligheid.pdf Voortgangsbrief Nationale Veiligheid 2016]</ref>.   
 
{| class="wikitable"
 
{| class="wikitable"
 
|-
 
|-

Revision as of 22:35, 23 September 2016

Each national or international strategy and policy identifies different categories of sectors that are considered to offer vital services and thus require protection. A 2008 survey examined the policies of 25 countries and identifies as the most frequently mentioned the following sectors:

  • Banking and Finance
  • Central Government / Government Services
  • (Tele-)Communication / Information and Communication Technologies (ICT)
  • Emergency / Rescue Services
  • Energy / Electricity
  • Health Services
  • Food
  • Transportation / Logistics / Distribution
  • Water (Supply)

The study comments that "these are the core sectors of modern societies, and possibly the areas where a large-scale interruption would be most devastating" [1].

Definitions

European Definitions

Council Directive 2008/114/EC

The EU directive identifies the following two sectors and their respective sub-sectors[2]:

I Energy

  1. Electricity: Infrastructures and facilities for generation and transmission of electricity in respect of supply electricity
  2. Oil: Oil production, refining, treatment, storage and transmission by pipelines
  3. Gas: (a) Gas production, refining, treatment, storage and transmission by pipelines, (b) LNG terminals

II Transport

  1. Road transport
  2. Rail transport
  3. Air transport
  4. Inland waterways transport
  5. Ocean & short sea shipping and ports



Other International Definitions

UNISDR

UNISDR presents the following examples of critical infrastructures:

transport systems, air and sea ports, electricity, water and communications systems, hospitals and health clinics, and centres for fire, police and public administration services. [3]



National Definitions

Australia

Australia's national critical infrastructure is categorised by seven critical sectors [4]:

  1. Energy
  2. Water services
  3. Communications
  4. Transport
  5. Food Chain
  6. Health
  7. Banking & Finance


Austria

Austria's national critical infrastructure is categorised by thirteen critical sectors [5]:

  1. Energy
  2. ICT
  3. Water
  4. Food
  5. Health
  6. Finance
  7. Transport
  8. Chemical industry
  9. Research
  10. Constitutional institutions
  11. Social system
  12. Distribution system
  13. Search and Rescue


Belgium

Belgium's National Critical Infrastructure is categorised by four critical sectors [6]:

  1. Energy (electric power, oil, gas)
  2. Transport (road, rail, air, inland shipping, sea and ocean shipping & harbours)
  3. Financial sector
  4. Electronic Communication

Although another law applies, the Space sector is likewise treated as a Critical Infrastructure.

Canada

Canada's national infrastructure is categorised by ten critical sectors [7]:

  1. Health
  2. Food
  3. Finance
  4. Water
  5. Information and Communication Technology
  6. Safety
  7. Energy and utilities
  8. Manufacturing
  9. Government
  10. Transportation


Croatia

Potentially eleven Critical Infrastructure Sectors have been identified by [8]:

  1. Energetika - Energy(production, including reservoirs and dams, transmission, storage, transportation fuels and energy distribution systems)
  2. Komunikacijska i informacijska tehnologija - Communication and information technology (electronic communication, data transmission, information systems, providing audio and audiovisual media services)
  3. Promet - Transport (road, rail, air, sea and inland waterway)
  4. Zdravstvo - Public Health (health care, manufacturing, marketing and supervision of medicinal products)
  5. Vodno gospodarstvo - Water Management (control and protective water structures and municipal water structures)
  6. Hrana - Food (production and food supply and food safety system, stockpiles)
  7. Financije - Finance (banking, stock exchanges, investment, insurance and payment systems)
  8. Proizvodnja, skladištenje i prijevoz opasnih tvari - Production, storage and transport of dangerous goods (chemical, biological, radiological and nuclear materials)
  9. Javne službe - Public sector (insurance of public order, protection and rescue, emergency medical services)
  10. Nacionalni spomenici i vrijednosti - National monuments and valuables
  11. Science and Education


Czech Republic

Czech Republic's national critical infrastructure is categorised by nine critical sectors [9]:

  1. Energy
  2. Water management
  3. Food industry and agriculture
  4. Health services
  5. Transport
  6. Communication and information systems
  7. Financial market and currency
  8. Emergency Services
  9. Public administration


Estonia

Estonia's critical infrastructure is categorised by nine critical sectors [10]:

  1. Energy facilities and networks: electricity, oil and gas storage facilities and refineries, transmission and distribution systems
  2. Communications and information technology: telecommunications, transmission and notification systems, software, hardware and networks, including the infrastructure of the Internet
  3. Finance: banking, securities and investment
  4. Health care: hospitals, health care facilities, laboratories and medicines, search, rescue and ambulance services
  5. Food: safety, means of production, wholesale and food industry
  6. Water: water reservoirs, water treatment plants and water networks
  7. Transport: airports, ports, inter-modal transport facilities, rail and mass transit networks, traffic control systems
  8. Production, storage and transport of dangerous goods: chemical, biological, radiological and other hazardous materials
  9. State agencies: critical services, facilities, information networks; information systems ensuring national security and defence, resources, databases and court registers with legal effect, and national cultural assets.


France

A critical infrastructure sector is defines as follows:

(in French)Secteur d’activités d’importance vitale (SAIV): secteur constitué d’activités concourant à un même objectif: qui ont trait à la production et la distribution de biens ou de services indispensables à la satisfaction des besoins essentiels pour la vie des populations, ou à l’exercice de l’autorité de l’État, ou au fonctionnement de l’économie, ou au maintien du potentiel de défense, ou à la sécurité de la nation, dès lors que ces activités sont difficilement substituables ou remplaçables; ou qui peuvent présenter un danger grave pour la population. [11]

A non-official translation follows:

Sector consists of activities contributing to a same objective: related to the production and distribution of goods or services essential to satisfy the basic needs of the population, or related to the exercise of state authority or the functioning of the economy, or the upkeep of the defence capacity, or the security of the nation, since these activities are difficult to substitute or replace; or that may seriously affect the health or life of the population.

Below a list of the sectors and the responsible ministry can be found. [12] [13]. This is a non-official translation in English and the Ministry in charge may change name at each nomination of a new government.

Critical Sector Responsible Ministry
Civil activities of the State Ministry of Home Affairs
Judicial activities Ministry for Justice
Military activities of the State Ministry of Defence
Power Ministry for Agriculture
Electronic communication, audiovisual and information Ministry for Electronic communications
Energy Ministry for Energy
Space and Research Ministry of Research
Finance Ministry of the Economy and Finance
Water management Ministry for Ecology
Industry Ministry for Industry
Health Ministry of Health
Transport Ministry of Transport


Germany

In Germany, the following sectors (and industries) are assigned to critical infrastructures [14]:

  1. Transport and traffic (aviation, maritime shipping, inland waterway transport, rail traffic, road traffic, logistics)
  2. Energy (electricity, mineral oil, gas)
  3. Information technology and telecommunication (telecommunication, information technology)
  4. Finance and insurance sector (banks/financial institutes, insurance companies, financial service providers, stock exchanges)
  5. State and administration (government and administration, parliament, judicial institutions, emergency and rescue services including disaster control)
  6. Food (food industry, food trade)
  7. Water (public water supply, public waste water disposal)
  8. Health (medical care, pharmaceuticals and vaccines, laboratories)
  9. Media and culture (broadcasting (television and radio), printed and electronic press, cultural assets, highly symbolic buildings)


Ghana

Ghana defines the following ten sectors to be part of their Critical National Infrastructure [15]:

  1. National Defense and Security
  2. Banking and Finance
  3. Information and Communications
  4. Energy
  5. Transportation
  6. Water
  7. Health Services
  8. Government
  9. Emergency Services
  10. Food and Agriculture



India

Critical sectors means sectors which are critical to the nation and whose incapacity or destruction will have a debilitating impact on national security, economy, public health or safety. [16]


Japan

Japan's national critical infrastructure is categorised by ten critical sectors [17]:

  1. Information and communications
  2. Finance
  3. Aviation
  4. Railways
  5. Electricity
  6. Gas
  7. Government and administrative services (including local public authorities)
  8. Medical services
  9. Water
  10. Logistics


Malaysia

Malaysia's National Critical Information Infrastructure (CNII):[18]

  1. National Defence & Security
  2. Banking & Finance
  3. Information & Communications
  4. Energy
  5. Transportation
  6. Water
  7. Health Services
  8. Government
  9. Emergency Services
  10. Food & Agriculture


Netherlands

The 2015 Critical Infrastructure review [19] redefined the Dutch critical infrastructure sectors and the critical products and services. On September 16, 2016, some additions to the Critical Infrastructure table below were announced [20].

Critical Processes Category Product, service or location Sector Responsible Ministry
National transmission and distribution of power A Electricity Energy Economic Affairs
Regional distribution of electricity B
Gas production
National transport and distribution of gas		 A Gas
Regional distribution of gas B
Oil supply A Oil
Internet and data services B Internet and data services ICT/Telecom Economic Affairs
Internet access and data transport B Internet access and data transport
Speech-communication services and SMS B Speech and SMS
Satellite services t.b.d.
Drinking water supply A Drinking water Drinking water Infrastructure and the Environment
Flood defences and water management A (part of) primary flood defences, regional flood defences Water Infrastructure and the Environment
Air traffic control B Schiphol Airport Transport Infrastructure and the Environment
Vessel Traffic Service B Port of Rotterdam
Large-scale production/processing and/or storage of chemicals and petrochemicals B Chemical and petrochemical industry Chemical Infrastructure and the Environment
Storage, production and processing of nuclear materials A Nuclear industry Nuclear Infrastructure and the Environment
Retail transactions B Financial transactions Financial Finance
Consumer financial transactions B
High-value transactions between banks B
Securities trading B
Emergency Services communication (1-1-2 and C2000) B Maintaining public order and Safety Public order and Safety (OOV) Security and Justice
Police Deployment B
E-government: The availability of reliable personal and corporate data about individuals and organisations, the ability to share such data, and the availability of data systems which multiple government agencies require to function B Digital government (under review) Public Administration The Interior and Kingdom Relations
National Security B National Security Defence Defence


Netherlands' national infrastructure was (2005 definition) categorised by twelve critical sectors and 31 subsectors [21]:

  1. Energy: electric power, gas, and oil
  2. Telecommunications and IT: fixed and mobile communications, radio, broadcasting, internet, and postal and courier services
  3. Drinking water (supply)
  4. Food: food supply, and food safety
  5. Health: emergency and other hospital care, medicines, and vaccines
  6. Financial services: payments (bank retail), and financial transfers by the Administration
  7. Surface water: water quality and water quantity (stemming and managing)
  8. Public order and safety
  9. Legal order/justice: courts and detention, and law enforcement
  10. Public administration: diplomacy, information services by the Administration, defence, and decision-making
  11. Transport: mainport Schiphol, mainport Rotterdam, main road infrastructure, main inland shipping infrastructure, and rail infrastructure
  12. Chemical and nuclear industry: transport, storage, production, and processing of dangerous materials

Each critical sector falls under the responsibility of a designated ministry.

Norway

Norway distinguishes six critical infrastructures and eleven critical societal functions. Critical infrastructures:

  1. Electric Power
  2. Electronic communications
  3. Water supply and Sewage
  4. Transport
  5. Oil and Gas
  6. Satellite-based infrastructure

Critical Societal Functions:

  1. Banking and Finance
  2. Food Supply
  3. Health Services, Social Services and Social Security Benefit
  4. Police
  5. Emergency and Rescue Services
  6. Crisis Management
  7. Parliament and Government
  8. The Judiciary
  9. Defence
  10. Environmental Surveillance
  11. Waste Treatment


Poland

Poland distinguishes nine critical infrastructure sectors / functions:

  1. Banking and financial systems
  2. Health protection systems
  3. Communication and computer systems
  4. Transport systems
  5. Rescue systems
  6. Systems ensuring functioning of the public administration
  7. Food and water provision systems
  8. Energy and fuel provision systems
  9. Systems that deal with the production, use, storage of chemical and radioactive substances, and also dangerous substance pipelines.


Qatar

The critical sectors which comprise Qatar's national critical infrastructure include but are not restricted to [22] [23] :

  1. Energy, Electricity, and Water (قطاع الطاقة والكهرباء والماء)
  2. Finance (القطاع الما ي ل)
  3. Government (القطاع الحكومي)
  4. Healthcare (قطاع الرعاية الصحية)
  5. Information and Communications Technology (قطاع تكنولوجيا المعلومات والاتصالات)
  6. Transportation (قطاع النقل والمواصلات)


Republic of Trinidad & Tobago

The national cyber security strategy recognizes the following critical (information) infrastructure sectors [24]:

  1. Banking and financial services
  2. Communications infrastructure
  3. Public health
  4. Public safety
  5. Public transportation
  6. Key infrastructure


Slovakia

Critical infrastructure sector: part of the critical infrastructure, to be integrated into devices; sector may contain one or more sub-sectors.

Sektorom kritickej infraštruktúry časť kritickej infraštruktúry, do ktorej sa zaraďujú prvky; sektor môže obsahovať jeden alebo viac podsektorov kritickej infraštruktúry (ďalej len „podsektor“). [25]


Slovenia

Sectors Critical Infrastructure of the Republic of Slovenia [26]:

  1. Energy support
  2. Transport
  3. Food
  4. Drinking water
  5. Medical care
  6. Finance
  7. Environmental protection
  8. Information and communication


Spain

Spains' national infrastructure is currently categorised by twelve critical sectors[27]:

  1. Administration
  2. Chemical Industry
  3. Energy
  4. Financial and Tax System
  5. Food Supply Chain
  6. Health
  7. Information and Communication Technologies (ICT)
  8. Nuclear Industry
  9. Research Laboratories
  10. Space
  11. Transport
  12. Water


Sweden

Swedens' national infrastructure is currently categorised by eleven critical sectors providing a set of critical societal functions [28]:

  1. Energy Supply
  2. Information and Communication Technologies (ICT)
  3. Financial Services
  4. Social Insurances
  5. Public Health, medical services and special social services
  6. Protection, Security and Safety
  7. Transport
  8. Municipal Services
  9. Food
  10. Trade and Industry
  11. Public Administration (governance, support functions, service sector)


Switzerland

Switzerlands' national infrastructure is currently categorised by ten critical sectors and 28 subsectors which are subcategorised very high critical, high critical and regular critical [29]:

  1. Energy: natural gas supply, oil supply, and power supply
  2. Financial services: banks, and insurance companies
  3. Information- & communication technologies (ICT): information technology, media, and telecommunication
  4. Industry: chemical and pharmaceutical industry, and mechanical and electrical engineering industries
  5. Public administration: foreign representations and headquarters of international organisations; national cultural property; parliament, government, justice, administration; research institutes
  6. Public health: medical care and hospitals; laboratories
  7. Public safety: armed forces, civil defense, emergency organizations (police, fire service, emergency medical service and rescue services)
  8. Transport: air transport, water transport, postal services, rail transport, road transport
  9. Water and food: food supply, drinking water supply
  10. Waste disposal: waste, waste water


Turkey

Turkey's national infrastructure is currently categorised by five critical sectors [30] [31]:

  1. Electronic Communication (Elektronik Haberleşme)
  2. Energy (Enerji)
  3. Water management (Su Yönetimi)
  4. Critical Public Services (Kritik Kamu Hizmetleri)
  5. Transport (Ulaştırma)
  6. Banking and Finance (Bankacılık ve Finans)


United Kingdom (UK)

UK's national infrastructure is categorised into nine sectors [32]:

  1. communications (telecommunications, postal services, broadcast)
  2. emergency services (ambulance, fire & rescue, marine, police)
  3. energy (electricity, gas, fuel)
  4. financial services (payment, clearing & settlement systems, market & exchange, public finances)
  5. food (production, processing, import, distribution, retail)
  6. government (central government, devolved administration/functions, regional and local government, parliament)
  7. health (health & social care)
  8. transport (aviation, maritime, land)
  9. water (portable water supply, waste water services, dams)


United States

The 2009 NIPP [33] defines a sector as

a logical collection of assets, systems, or networks that provide a common function to the economy, government, or society.

Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience[34] identifies 16 critical infrastructure sectors:

  1. Chemical Sector
  2. Commercial Facilities Sector
  3. Communications Sector
  4. Critical Manufacturing Sector
  5. Dams Sector [35]
  6. Defense Industrial Base Sector
  7. Emergency Services Sector
  8. Energy Sector
  9. Financial Services Sector
  10. Food and Agriculture Sector
  11. Government Facilities Sector
  12. Healthcare and Public Health Sector
  13. Information Technology Sector
  14. Nuclear Reactors, Materials, and Waste Sector
  15. Transportation Systems Sector
  16. Water and Wastewater Systems Sector

Each sector falls under the responsibility of a designated Sector-Specific Agency (SSA).


See also

Notes

  1. ↑ E. Brunner, M. Suter, International CIIP Handbook 2008/2009: An Inventory of 25 National and 7 International Critical Information Infrastructure Protection Policies, A. Wenger, V. Mauer, M. Dunn (Eds.), CRN Handbooks, Vol. 4, no. 1, Center for Security Studies (CSS), Zurich, Switzerland, September 2008.
  2. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  3. ↑ 2009 UNISDR Terminology on Disaster Risk Reduction, United Nations International Strategy for Disaster Reduction (UNISDR), Geneva, Switzerland, May 2009.
  4. ↑ Critical Infrastructure Resilience Strategy
  5. ↑ APCIP
  6. ↑ Service Public Fédéral Intérieur/Federale Overheidsdienst Binnenlandse Zaken F./N. 2011-1799; C-2011/00399 (2011)
  7. ↑ http://www.publicsafety.gc.ca/cnt/ntnl-scrt/crtcl-nfrstrctr/index-eng.aspx Public Safety Canada - Critical Infrastructure]
  8. ↑ Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)
  9. ↑ Crisis management act
  10. ↑ Cyber Security Strategy, Min. of Defence, Tallinn (2008)
  11. ↑ INSTRUCTION GENERALE INTERMINISTERIELLE RELATIVE A LA SECURITE DES ACTIVITES D’IMPORTANCE VITALE N°6600/SGDSN/PSE/PSN du 7 janvier 2014, PREMIER MINISTRE, SECRETARIAT GENERAL DE LA DEFENSE ET DE LA SECURITE NATIONALE, Direction Protection et Sécurité de l’Etat N° NOR: PRMD1400503J
  12. ↑ Arrêté du 3 juillet 2008 portant modification de l’arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0156 du 5 juillet 2008, NOR : PRMD0813724A.
  13. ↑ [http://www.legifrance.gouv.fr/jopdf/common/jo_pdf.jsp?numJO=0&dateJO=20060604&numTexte=1&pageDebut=08502&pageFin=08502 Arrêté du 2 juin 2006 fixant la liste des secteurs d’activités d’importance vitale et désignant les ministres coordonnateurs desdits secteurs. JOURNAL OFFICIEL DE LA REPUBLIQUE FRANCAISE N°0129 du 4 juin 2006, NOR : PRMX0609332A ]
  14. ↑ Unpublished working glossary of UP KRITIS and BSI, 2014
  15. ↑ Republic of Ghana - National Cyber Security Policy & Strategy (2014)
  16. ↑ G.S.R 19 (E) dated 16.01.2014-Information Technology (National critical Information Infrastructure Protection centre and manner of performing function and duties) Rules, 2013
  17. ↑ Cyber Security Strategy (2013)
  18. ↑ Malaysia (2009)
  19. ↑ Voortgangsbrief nationale veiligheid 9 april 2015
  20. ↑ Voortgangsbrief Nationale Veiligheid 2016
  21. ↑ [1.pdf Bescherming Vitale infrastructuur (2010)]
  22. ↑ QATAR National Cyber Security Strategy (May 2014)
  23. ↑ الاستراتيجية الوطنية للأمن السيبراني QATAR NCSS - Arabic version (May 2014)
  24. ↑ Government of the Republic of Trinidad & Tobago, National Cyber Security Strategy (December 2012)
  25. ↑ [http://www.zbierka.sk/sk/predpisy/45-2011-z-z.p-33998.pdf Act no. 45/ 2011 Col. On Critical Infrastructure]
  26. ↑ [http://www.mo.gov.si/fileadmin/mo.gov.si/pageuploads/zki/SklepVlade-potrditev_osnovnih_in_sektorskih_kriterijev_kriticnosti2012.pdf Osnovni in sektorski kriteriji kritičnosti za določanje kritične infrastrukture državnega pomena v Republiki Sloveniji (2012)]
  27. ↑ CNPIC
  28. ↑ Action Plan for the Protection of Vital Societal Functions & Critical Infrastructure, Swedish Civil Contingencies Agency (MSB) (2014).
  29. ↑ The Swiss Programme on Critical Infrastructure Protection - factsheet
  30. ↑ <http://www.resmigazete.gov.tr/eskiler/2011/10/20111018-4.htm Decree No. 2 on the Regulation Amending the Regulation on Military Forbidden Zones and Security Zones, 20-6-2013
  31. ↑ [http://www.udhb.gov.tr/doc/siberg/2016-2019guvenlik.pdf 2016-2019 ULUSAL SİBER GÜVENLİK STRATEJİSİ
  32. ↑ Centre for the Protection of National Infrastructure (CPNI)
  33. ↑ National Infrastructure Protection Plan, Partnering to enhance protection and resiliency, US Department of Homeland Security, 2009
  34. ↑ Presidential Policy Directive -- Critical Infrastructure Security and Resilience, PPD-21, 2013
  35. ↑ Note: The Dams Sector comprises dam projects, navigation locks, levees, hurricane barriers, mine tailings impoundments, and other similar water retention and/or control facilities. Dams are vital to the nation's infrastructure and provide a wide range of economic, environmental, and social benefits, including hydroelectric power, river navigation, water supply, flood control, and recreation.
Retrieved from "https://websites.fraunhofer.de/CIPedia/index.php?title=Critical_Infrastructure_Sector&oldid=5406"