Critical infrastructure: Difference between revisions
DEPARTMENT OF EDUCATION ALSO DEVELOPS AND DEPLOYS CNI IN THE FORM OF EDUCATION SERVICES Tags: Mobile edit Mobile web edit |
No edit summary |
||
Line 41: | Line 41: | ||
===Germany=== |
===Germany=== |
||
The German critical-infrastructure protection programme KRITIS is coordinated by the [[Federal Ministry of the Interior (Germany)|Federal Ministry of the Interior]]. Some of its special agencies like the [[German Federal Office for Information Security]] or the Federal Office of Civil Protection and Disaster Assistance BBK deliver the respective content, e.g., about [[IT systems]].<ref>{{Cite web |url=http://www.bmi.bund.de/cae/servlet/contentblob/544770/publicationFile/27031/kritis.pdf |title=''Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)'' |access-date=September 17, 2010 |archive-url=https://web.archive.org/web/20170915024238/http://www.bmi.bund.de/cae/servlet/contentblob/544770/publicationFile/27031/kritis.pdf |archive-date=September 15, 2017 |url-status=dead }}</ref> |
The German critical-infrastructure protection programme KRITIS is coordinated by the [[Federal Ministry of the Interior (Germany)|Federal Ministry of the Interior]]. Some of its special agencies like the [[German Federal Office for Information Security]] or the Federal Office of Civil Protection and Disaster Assistance BBK deliver the respective content, e.g., about [[IT systems]].<ref>{{Cite web |url=http://www.bmi.bund.de/cae/servlet/contentblob/544770/publicationFile/27031/kritis.pdf |title=''Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)'' |access-date=September 17, 2010 |archive-url=https://web.archive.org/web/20170915024238/http://www.bmi.bund.de/cae/servlet/contentblob/544770/publicationFile/27031/kritis.pdf |archive-date=September 15, 2017 |url-status=dead }}</ref> |
||
===Singapore=== |
|||
In Singapore, critical infrastructures are mandated under the Protected Areas and Protected Places Act.<ref>{{cite web |title=Protected Areas and Protected Places Act - Singapore Statutes Online |url=https://sso.agc.gov.sg/Act-Rev/PAPPA1959/Published/20131231 |website=sso.agc.gov.sg |publisher=Government of Singapore |access-date=15 October 2022 |language=en |date=31 December 2013}}</ref> In 2017, the Infrastructure Protection Act was passed in Parliament, which provides for the protection of certain areas, places and other premises in Singapore against security risks.<ref>{{cite web |title=Infrastructure Protection Act 2017 - Singapore Statutes Online |url=https://sso.agc.gov.sg/Act/IPA2017 |website=sso.agc.gov.sg |access-date=15 October 2022 |language=en |date=2 October 2017}}</ref> It came into force in 2018.<ref>{{cite web |title=Infrastructure Protection Act |url=https://www.police.gov.sg/Advisories/Infrastructure-Protection/Infrastructure-Protection-Act |website=police.gov.sg |publisher=Singapore Police Force |access-date=15 October 2022 |language=en |date=14 March 2019}}</ref><ref>{{cite web |title=Protecting Infrastructure |url=https://www.mha.gov.sg/what-we-do/managing-security-threats/protecting-infrastructure |website=mha.gov.sg |publisher=Ministry of Home Affairs |access-date=15 October 2022 |language=en}}</ref> |
|||
===United Kingdom=== |
===United Kingdom=== |
Revision as of 12:23, 15 October 2022
Critical infrastructure (or critical national infrastructure (CNI) in the UK) is a term used by governments to describe assets that are essential for the functioning of a society and economy – the infrastructure. Most commonly associated with the term are facilities for:
- Shelter; Heating (e.g. natural gas, fuel oil, district heating);
- Agriculture, food production and distribution;
- Education, skills development and technology transfer / basic subsistence and unemployment rate statistics;
- Water supply (drinking water, waste water/sewage, stemming of surface water (e.g. dikes and sluices));
- Public health (hospitals, ambulances);
- Transportation systems (fuel supply, railway network, airports, harbours, inland shipping);
- Security services (police, military).
- Electricity generation, transmission and distribution; (e.g. natural gas, fuel oil, coal, nuclear power)
- Renewable energy, which are naturally replenished on a human timescale, such as sunlight, wind, rain, tides, waves, and geothermal heat.
- Telecommunication; coordination for successful operations
- Economic sector; Goods and services and financial services (banking, clearing);
Regional critical infrastructure protection programmes
Canada
The Canadian Federal Government identifies the following 10 Critical Infrastructure Sectors as a way to classify essential assets.[1] [2]
- Energy & Utilities: Electricity providers; off-shore/on-shore oil & gas; coal supplies, natural gas providers; home fuel oil; gas station supplies; alternative energy suppliers (wind, solar, other)
- Information and Communication Technology: Broadcast Media; telecommunication providers (landlines, cell phones, internet, wifi); Postal services;
- Finance: Banking services, government finance/aid departments; taxation
- Health: Public health & wellness programs, hospital/clinic facilities; blood & blood products
- Food: Food supply chains; food inspectors; import/export programs; grocery stores; Agri & Acqua culture; farmers markets
- Water: Water supply & protection; wastewater management; fisheries & ocean protection programs
- Transportation: Roads, bridges, railways, aviation/airports; shipping & ports; transit
- Safety: Emergency responders; public safety programs
- Government: Military; Continuity of governance
- Manufacturing: Industry, economic development
European Union
The European Programme for Critical Infrastructure Protection (EPCIP) has been laid out in EU Directives by the Commission (EU COM(2006) 786 final).
It has proposed a list of European critical infrastructures based upon inputs by its member states.
Each designated European Critical Infrastructures (ECI) will have to have an Operator Security Plan (OSP) covering the identification of important assets, a risk analysis based on major threat scenarios and the vulnerability of each asset, and the identification, selection and prioritisation of counter-measures and procedures.
Germany
The German critical-infrastructure protection programme KRITIS is coordinated by the Federal Ministry of the Interior. Some of its special agencies like the German Federal Office for Information Security or the Federal Office of Civil Protection and Disaster Assistance BBK deliver the respective content, e.g., about IT systems.[3]
Singapore
In Singapore, critical infrastructures are mandated under the Protected Areas and Protected Places Act.[4] In 2017, the Infrastructure Protection Act was passed in Parliament, which provides for the protection of certain areas, places and other premises in Singapore against security risks.[5] It came into force in 2018.[6][7]
United Kingdom
In the UK, the Centre for the Protection of National Infrastructure (CPNI) provides information, personnel and physical security advice to the businesses and organizations which make up the UK's national infrastructure, helping to reduce its vulnerability to terrorism and other threats.
It can call on resources from other government departments and agencies, including MI5, the Communications-Electronics Security Group and other government departments responsible for national infrastructure sectors.
United States
The USA has had a wide-reaching critical infrastructure protection program in place since 1996. Its Patriot Act of 2001 defined critical infrastructure as those "systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters."
In 2014 the NIST Cybersecurity Framework was published, and quickly became a popular set of guidelines, despite the significant costs of full compliance.[8]
These have identified a number of critical infrastructures and responsible agencies:
- Agriculture and food – Departments of Agriculture and Health and Human Services
- Water – Environmental Protection Agency
- Public Health – Department of Health and Human Services
- Emergency Services – Department of Homeland Security
- Government – Department of Homeland Security
- Defense Industrial Base – Department of Defense
- Information and Telecommunications – Department of Commerce
- Energy – Department of Energy
- Transportation and Shipping – Department of Transportation
- Banking and Finance – Department of the Treasury
- Chemical Industry and Hazardous Materials – Department of Homeland Security
- Post – Department of Homeland Security
- National monuments and icons - Department of the Interior
- Critical manufacturing - Department of Homeland Security (14th sector announced March 3, 2008; recorded April 30, 2008)
National Infrastructure Protection Plan
The National Infrastructure Protection Plan (NIPP) defines critical infrastructure sector in the US. Presidential Policy Directive 21 (PPD-21),[9] issued in February 2013 entitled Critical Infrastructure Security and Resilience mandated an update to the NIPP. This revision of the plan established the following 16 critical infrastructure sectors:
- Chemical
- Commercial facilities
- Communications
- Critical manufacturing
- Dams
- Defense industrial base
- Emergency services
- Energy
- Financial services
- Food and agriculture
- Government facilities
- Healthcare and public health
- Information technology
- Nuclear reactors, materials, and waste
- Transportation systems
- Water and wastewater systems
National Monuments and Icons along with the postal and shipping sector were removed in 2013 update to the NIPP. The 2013 version of the NIPP has faced criticism for lacking viable risk measures.[10][11] The plan assigns the following agencies sector-specific coordination responsibilities:
- Chemical
- Commercial facilities
- Communications
- Critical manufacturing
- Dams
- Emergency services
- Government facilities (jointly with General Services Administration)
- Information technology
- Nuclear reactors, materials, and waste
- Transportation systems (jointly with Department of Transportation)
- Department of Defense
- Defense industrial base
- Department of Energy
- Energy
- Department of the Treasury
- Financial services
- Department of Agriculture
- Food and agriculture
- General Services Administration
- Government facilities (jointly with Department of Homeland Security)
- Department of Health and Human Services
- Healthcare and Public Health
- Department of Transportation
- Transportation systems (jointly with Department of Homeland Security)
- Environmental Protection Agency
- Water and wastewater systems
State-level legislation
Several U.S. states have passed "critical infrastructure" bills, promoted by the American Legislative Exchange Council (ALEC), to criminalize protests against the fossil fuel industry.[12] In May 2017, Oklahoma passed legislation which created felony penalties for trespassing on land considered critical infrastructure, including oil and gas pipelines, or conspiring to do so; ALEC introduced a version of the bill as a model act and encouraged other states to adopt it.[13] In June 2020, West Virginia passed the Critical Infrastructure Protection Act, which created felony penalties for protests against oil and gas facilities.[14]
See also
References
- ^ "National Cross Sector Forum 2021-2023 Action Plan for Critical Infrastructure". May 26, 2021.
- ^ "National Strategy for Critical Infrastructure". December 21, 2018.
- ^ "Nationale Strategie zum Schutz Kritischer Infrastrukturen (KRITIS-Strategie)" (PDF). Archived from the original (PDF) on September 15, 2017. Retrieved September 17, 2010.
- ^ "Protected Areas and Protected Places Act - Singapore Statutes Online". sso.agc.gov.sg. Government of Singapore. December 31, 2013. Retrieved October 15, 2022.
- ^ "Infrastructure Protection Act 2017 - Singapore Statutes Online". sso.agc.gov.sg. October 2, 2017. Retrieved October 15, 2022.
- ^ "Infrastructure Protection Act". police.gov.sg. Singapore Police Force. March 14, 2019. Retrieved October 15, 2022.
- ^ "Protecting Infrastructure". mha.gov.sg. Ministry of Home Affairs. Retrieved October 15, 2022.
- ^ "NIST Cybersecurity Framework Adoption Hampered By Costs, Survey Finds". Dark Reading. March 30, 2016. Retrieved August 2, 2016.
- ^ "Presidential Policy Directive -- Critical Infrastructure Security and Resilience". whitehouse.gov. February 12, 2013. Retrieved March 12, 2019.
- ^ White, R. (February 13, 2014). "Towards a Unified Homeland Security Strategy: An Asset Vulnerability Model". Homeland Security Affairs. Retrieved February 26, 2015.
- ^ Kahan, J (February 4, 2015). "Resilience Redux: Buzzword or Basis for Homeland Security". Homeland Security Affairs. Retrieved February 28, 2015.
- ^ Brown, Alleen; Lacy, Akela (January 12, 2021). "In Wake of Capitol Riot, GOP Legislatures 'Rebrand' Old Anti-BLM Protest Laws". The Intercept. Retrieved February 10, 2021.
- ^ Brown, Alleen (May 23, 2019). "Pipeline Opponents Strike Back Against Anti-Protest Laws". The Intercept. Retrieved February 13, 2021.
- ^ Brown, Alleen (June 7, 2020). "A Powerful Petrochemical Lobbying Group Advanced Anti-Protest Legislation in the Midst of the Pandemic". The Intercept. Retrieved February 13, 2021.