Critical infrastructure: Difference between revisions
imported>Howard C. Berkowitz No edit summary |
mNo edit summary |
||
(12 intermediate revisions by 3 users not shown) | |||
Line 1: | Line 1: | ||
{{subpages}} | {{PropDel}}<br><br>{{subpages}} | ||
{{TOC|right}} | {{TOC|right}} | ||
If a nation were a living being, '''critical infrastructure''' would be the blood vessels, nervous system, immune responses, and other functions necessary for it to function. U.S. policy was first stated by President [[Bill Clinton]] in Presidential Decision Directive 63, and most industrialized nations have equivalents:<blockquote>physical and cyber-based systems essential to the minimum operations of the economy and government. They include, but are not limited to, telecommunications, energy, banking and finance, transportation, water systems and emergency services, both governmental and private. Many of the nation's critical infrastructures have historically been physically and logically separate systems that had little interdependence. As a result of advances in information technology and the necessity of improved efficiency, however, these infrastructures have become increasingly automated and interlinked. These same advances have created new vulnerabilities to equipment failure, human error, weather and other natural causes, and physical and cyber attacks. Addressing these vulnerabilities will necessarily require flexible, evolutionary approaches that span both the public and private sectors, and protect both domestic and international security.<ref>{{citation | If a nation were a living being, '''critical infrastructure''' would be the blood vessels, nervous system, immune responses, and other functions necessary for it to function. U.S. policy was first stated by President [[Bill Clinton]] in Presidential Decision Directive 63, and most industrialized nations have equivalents:<blockquote>physical and cyber-based systems essential to the minimum operations of the economy and government. They include, but are not limited to, telecommunications, energy, banking and finance, transportation, water systems and emergency services, both governmental and private. Many of the nation's critical infrastructures have historically been physically and logically separate systems that had little interdependence. As a result of advances in information technology and the necessity of improved efficiency, however, these infrastructures have become increasingly automated and interlinked. These same advances have created new vulnerabilities to equipment failure, human error, weather and other natural causes, and physical and cyber attacks. Addressing these vulnerabilities will necessarily require flexible, evolutionary approaches that span both the public and private sectors, and protect both domestic and international security.<ref>{{citation | ||
Line 6: | Line 6: | ||
| date = May 28, 1998 | | date = May 28, 1998 | ||
| title = Presidential Decision Directive 63, Critical Infrastructure Protection}}</ref></blockquote> | | title = Presidential Decision Directive 63, Critical Infrastructure Protection}}</ref></blockquote> | ||
By its very nature, critical infrastructure is a target for [[terrorism]]. Certain facilities, such as chemical plants, may not themselves strictly be critical infrastructure, but, if attacked, could have such catastrophic effects that they must be considered in the category. The [[Chernobyl disaster|Chernobyl]] power plant, of course, was both part of critical electrical infrastructure but also a high-risk target, through human error rather than deliberate attack. | |||
==Critical functions== | ==Critical functions== | ||
===Information and communications=== | ===Information and communications=== | ||
Line 11: | Line 13: | ||
Often more critical than the human-to-human communications networks for the functions below are the [[System Control And Data Acquisition]] networks that directly control the electrical power grid and similar real-time services. SCADA networks must be completely isolated from the public [[Internet]], but they still may run over physical facilities that are in this functional area. | Often more critical than the human-to-human communications networks for the functions below are the [[System Control And Data Acquisition]] networks that directly control the electrical power grid and similar real-time services. SCADA networks must be completely isolated from the public [[Internet]], but they still may run over physical facilities that are in this functional area. | ||
===Military=== | |||
Command and control facilities, large bases, and organized and reserve units can be critical both in providing disciplined responses in natural disasters, as well as resources to deal with direct attack. The [[Pentagon Building]] was an example of both a resource and a target in the [[9/11 Attack|9/11]] attack. Military command tends to be the best protected. | |||
===Banking and finance=== | ===Banking and finance=== | ||
In this categories are institutions involved with monetary transactions and of financial instruments equivalent to money, including transfer, storage and saving, investment, exchange and disbursement. | In this categories are institutions involved with monetary transactions and of financial instruments equivalent to money, including transfer, storage and saving, investment, exchange and disbursement. | ||
Line 18: | Line 22: | ||
Transportation includes aviation and its supporting systems, roads and highways, trucking and personal vehicles and their traffic control systems, pipelines, ports and waterways and vessels, mass transit facilities, freight and long-haul passenger rail, and critical package delivery. | Transportation includes aviation and its supporting systems, roads and highways, trucking and personal vehicles and their traffic control systems, pipelines, ports and waterways and vessels, mass transit facilities, freight and long-haul passenger rail, and critical package delivery. | ||
===Emergency services=== | ===Emergency services=== | ||
[[Emergency medical | [[Emergency medical service]]s and [[hospital]]s, [[police]] and other law enforcement, [[firefighting]] and rescue services are clearly critical services, along with their [[command and control]] systems including organizations managing the [[Incident Command System]]. Major disasters will require regional and national coordination. Hospitals are part of this functional area. | ||
===Public health services=== | ===Public health services=== | ||
Prevention, surveillance, public health laboratories, personal health and mass treatment all fall into this category. | Prevention, surveillance, public health laboratories, personal health and mass treatment all fall into this category. | ||
Line 27: | Line 32: | ||
===Oil and gas production and storage=== | ===Oil and gas production and storage=== | ||
Production, processing, storage and delivery of oil and gas are critical to function, as well as needing protection as possible centers of disasters. | Production, processing, storage and delivery of oil and gas are critical to function, as well as needing protection as possible centers of disasters. | ||
== | ===Food supply=== | ||
While the exact agencies and ministries will vary by country, the U.S. assignments are illustrative as the government departments with responsibilities for particular areas. | Agriculture, food processing, storage and distribution. | ||
==Example of coordinating government agencies== | |||
While the exact agencies and ministries will vary by country, the U.S. assignments are illustrative as the government departments with responsibilities for particular areas. Overall coordination typically would be under the [[National Incident Management System]] and [[National Response Framework]] under the Department of Homeland Security. | |||
In the U.K., the central coordination organization is the [[Cabinet Office Briefing Rooms]] for the most serious situations, and a Lead Government Department for lesser problems.<ref>{{citation | |||
| url = http://www.cabinetoffice.gov.uk/ukresilience/response/ukgovernment.aspx | |||
| title = Central Government Arrangements | |||
| publisher = UK Cabinet Office | |||
| date = 22 May 2010}}</ref> | |||
{| class="wikitable" | {| class="wikitable" | ||
|- | |- | ||
Line 35: | Line 49: | ||
|- | |- | ||
| [[U.S. Department of Commerce]] | | [[U.S. Department of Commerce]] | ||
| General | | General information and communications | ||
|- | |- | ||
| [[U.S. Department of the Treasury]] | | [[U.S. Department of the Treasury]] | ||
Line 50: | Line 64: | ||
|- | |- | ||
| [[U.S. Department of Homeland Security]] | | [[U.S. Department of Homeland Security]] | ||
| Firefighting | | [[Firefighting]] | ||
|- | |- | ||
| [[U.S. Department of Homeland Security]] and [[U.S. Department of Defense]] | | [[U.S. Department of Homeland Security]] and [[U.S. Department of Defense]] | ||
| Continuity of government | | [[Continuity of government]] | ||
|- | |- | ||
| [[U.S. Department of Health and Human Services]] | | [[U.S. Department of Health and Human Services]] | ||
| Public health services, including prevention, surveillance, laboratory services and personal health services | | [[public health|Public health services]], including prevention, surveillance, laboratory services and personal health services | ||
|- | |- | ||
| [[U.S. Department of Energy]] | | [[U.S. Department of Energy]] | ||
Line 73: | Line 87: | ||
| Weather and atmospheric events | | Weather and atmospheric events | ||
|} | |} | ||
==References== | ==References== | ||
{{reflist}} | {{reflist}}[[Category:Suggestion Bot Tag]] |
Latest revision as of 07:00, 3 August 2024
This article may be deleted soon. | ||
---|---|---|
If a nation were a living being, critical infrastructure would be the blood vessels, nervous system, immune responses, and other functions necessary for it to function. U.S. policy was first stated by President
Bill Clinton in Presidential Decision Directive 63, and most industrialized nations have equivalents:
By its very nature, critical infrastructure is a target for terrorism. Certain facilities, such as chemical plants, may not themselves strictly be critical infrastructure, but, if attacked, could have such catastrophic effects that they must be considered in the category. The Chernobyl power plant, of course, was both part of critical electrical infrastructure but also a high-risk target, through human error rather than deliberate attack. Critical functionsInformation and communicationsIf those trying to repair damaged infrastructure cannot communicate, little will be accomplished. It may not be intuitive, but the communications systems that have the highest priority for repair are not those assigned to top executives, but to network management and repair. Most of the other critical functions also depend on computing and communications, so the core communications systems are the most critical of all. Often more critical than the human-to-human communications networks for the functions below are the System Control And Data Acquisition networks that directly control the electrical power grid and similar real-time services. SCADA networks must be completely isolated from the public Internet, but they still may run over physical facilities that are in this functional area. MilitaryCommand and control facilities, large bases, and organized and reserve units can be critical both in providing disciplined responses in natural disasters, as well as resources to deal with direct attack. The Pentagon Building was an example of both a resource and a target in the 9/11 attack. Military command tends to be the best protected. Banking and financeIn this categories are institutions involved with monetary transactions and of financial instruments equivalent to money, including transfer, storage and saving, investment, exchange and disbursement. Water supplySources of water, reservoirs and holding tanks, aqueducts and water piping, water purification, and delivery mechanisms fall into this functional area. While potable drinking water is the most obvious critical function, water supplies for electronic and manufacturing cooling, and for firefighting, can be equally critical to the region or nation. Sewage treatment also falls into this category. TransportationTransportation includes aviation and its supporting systems, roads and highways, trucking and personal vehicles and their traffic control systems, pipelines, ports and waterways and vessels, mass transit facilities, freight and long-haul passenger rail, and critical package delivery. Emergency servicesEmergency medical services and hospitals, police and other law enforcement, firefighting and rescue services are clearly critical services, along with their command and control systems including organizations managing the Incident Command System. Major disasters will require regional and national coordination. Hospitals are part of this functional area. Public health servicesPrevention, surveillance, public health laboratories, personal health and mass treatment all fall into this category. Continuity of government servicesJust as communications systems are at the heart of critical infrastructure, government emergency operations centers, often hardened against natural disaster and direct attack, are essential. After major catastrophes, it may be necessary to bring in mobile command centers. Electrical powerElectrical power starts with generation using oil, coal, nuclear, solar, and other power sources, and the transportation needed to bring fuel to the generating plants. It then moves to the transmission and distribution systems, and the SCADA and operations centers controlling them all. Oil and gas production and storageProduction, processing, storage and delivery of oil and gas are critical to function, as well as needing protection as possible centers of disasters. Food supplyAgriculture, food processing, storage and distribution. Example of coordinating government agenciesWhile the exact agencies and ministries will vary by country, the U.S. assignments are illustrative as the government departments with responsibilities for particular areas. Overall coordination typically would be under the National Incident Management System and National Response Framework under the Department of Homeland Security. In the U.K., the central coordination organization is the Cabinet Office Briefing Rooms for the most serious situations, and a Lead Government Department for lesser problems.[2] References
|