Skip to main content

Critical Infrastructure Protection and Resilience—Integrating Interdependencies

  • Chapter
  • First Online:
Security by Design

Abstract

Throughout the world, there is strong recognition that critical infrastructure security and resilience need to be improved. Enhancing the protection and resilience of critical infrastructure has emerged as an urgent goal—a goal made more challenging by the complexity of these systems and their inherent interdependencies. Consideration of critical infrastructure interdependencies, as well as their integration into risk management and business continuity processes, is an important element of U.S Presidential Policy Directive 21 on Critical Infrastructure Security and Resilience (PPD–21), the Canada-United States Action Plan for Critical Infrastructure, and the European Program for Critical Infrastructure Protection. Several international standards also require the consideration of interdependencies between organizations and the effect on their risk management and business continuity practices. All of these documents, from the strategic level through the operational standards, involve the consideration of interdependencies that can exist among infrastructure, how they are managed, and how they affect business continuity, security, and resilience management. A “system of systems” approach can help establish the appropriate scope of an interdependency analysis, as well as the specific assets and/or subsystems for which resilience-related information should be collected.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 99.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 129.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 129.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    A third pipeline is currently under development.

References

  1. ASIS (2009) The organizational resilience standard [ASIS SPC. 1-2009]. Available via https://www.ndsu.edu/fileadmin/emgt/ASIS_SPC.1-2009_Item_No._1842.pdf. Accessed 26 Oct 2017

  2. Australian Government (2010) Critical infrastructure resilience strategy. Commonwealth of Australia. Available via https://www.tisn.gov.au/Documents/Australian+Government+s+Critical+Infrastructure+Resilience+Strategy.pdf. Accessed 26 Oct 2017

  3. Australian Government (2012) Critical infrastructure program for modelling and analysis (CIPMA). Attorney-General’s Department. Available via https://www.ag.gov.au/NationalSecurity/InfrastructureResilience/Pages/CriticalInfrastructureProgramforModellingandAnalysisCIPMA.aspx. Accessed 26 Oct 2017

  4. Carlson LG, Bassett W, Buehring M, Collins S, Folga B, Haffenden F, Petit J, Phillips D, Verner RW (2012) Resilience theory and applications. ANL/DIS-12-1. Argonne National Laboratory, Argonne, IL. Available via http://www.ipd.anl.gov/anlpubs/2012/02/72218.pdf. Accessed 26 Oct 2017

  5. Clifford M, Macal C (2016) Advancing infrastructure dependency and interdependency modeling: a summary report from the technical exchange. Argonne National Laboratory. Available via https://anl.app.box.com/s/3t7mnesdajzl708xy9xo4vczj2qv1wom. Accessed 26 Oct 2017

  6. Cobb A (1997) Australia’s vulnerability to information attacks. Australian Strategic and Defence Studies Centre, Australia

    Google Scholar 

  7. Cobb A (1999) CI attack: an investigation of the vulnerability of an OECD country. In: Bosch JMJ, Luiijf HAM, Mollema AM (eds) NL ARMS—Netherlands annual review of military studies 1999: information operations. Tilburg University Press, Tilburg, Netherlands, pp 201–222

    Google Scholar 

  8. Commission of the European Communities (2005) Green paper on a European programme for critical infrastructure protection. COM (2005) 576 final. Bruxelles, Belgique. Available via http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=LEGISSUM:l33260. Accessed 26 Oct 2017

  9. Council of the European Union (2003) A secure Europe in a better world, European security strategy. Brussels, 12 December. Available via https://www.consilium.europa.eu/uedocs/cmsUpload/78367.pdf. Accessed 26 Oct 2017

  10. Council of the European Union (2008) Council directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection. Official Journal of the European Union. Available via http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2008:345:0075:0082:EN:PDF. Accessed 26 Oct 2017

  11. Council of the European Union (2010) Draft internal security strategy for the European Union: ‘towards a European security model’, Brussels, 23 February 2010. Available via http://register.consilium.europa.eu/pdf/en/10/st05/st05842-re02.en10.pdf. Accessed 26 Oct 2017

  12. CSIRO (2012) Protecting Australia’s critical infrastructure with CIPMA. Commonwealth Scientific and Industrial Research Organisation. Site Internet du Commonwealth Scientific and Industrial Research Organisation. Available via http://www.csiro.au/partnerships/CIPMA.html. Accessed 26 Oct 2017

  13. DHS (2009) National infrastructure protection plan 2009. Available via https://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf. Accessed 26 Oct 2017

  14. DHS (2012) Office of infrastructure protection strategic plan: 2012–2016. Available via http://www.dhs.gov/sites/default/files/publications/IP-Strategic-Plan-FINAL-508.pdf. Accessed 26 Oct 2017

  15. DHS (2013) National infrastructure protection plan 2013: partnering for critical infrastructure security and resilience. Available via https://www.dhs.gov/sites/default/files/publications/national-infrastructure-protection-plan-2013-508.pdf. Accessed 26 Oct 2017

  16. DHS (2015) National critical infrastructure security and resilience research and development plan. Available via http://www.dhs.gov/sites/default/files/publications/NationalCISRRDPlan_Nov2015.pdf. Accessed 26 Oct 2017

  17. DHS (2017) Regional resiliency assessment program. Available via https://www.dhs.gov/regional-resiliency-assessment-program. Accessed 26 Oct 2017

  18. DHS and Public Safety Canada (2010) Canada-United States action plan for critical infrastructure. Available via https://www.dhs.gov/xlibrary/assets/ip_canada_us_action_plan.pdf. Accessed 26 Oct 2017

  19. DOE (2001) Critical infrastructure interdependencies, impact of the September 11 terrorist attacks on the world trade center—a case study. Office of Critical Infrastructure Protection, 28 p

    Google Scholar 

  20. DOE (2017) Quadrennial energy review. Available via https://energy.gov/epsa/initiatives/quadrennial-energy-review-qer. Accessed 26 Oct 2017

  21. Europa (2012) European programme for critical infrastructure protection. Available via http://europa.eu/legislation_summaries/justice_freedom_security/fight_against_terrorism/l33260_en.htm. Accessed 26 Oct 2017

  22. European Commission (2017a) Horizon 2020—the EU framework programme for research and innovation. Available via http://ec.europa.eu/programmes/horizon2020/. Accessed 26 Oct 2017

  23. European Commission (2017b) Horizon 2020—the EU framework programme for research and innovation—security. Available via http://ec.europa.eu/programmes/horizon2020/en/area/security. Accessed 26 Oct 2017

  24. FEMA (2017) PS-PrepTM program resources. Available via https://www.fema.gov/program-resources. Accessed 26 Oct 2017

  25. Flynn S (2015) Bolstering critical infrastructure resilience after superstorm Sandy: lessons for New York and the nation. Georges J. Kostas Research Institute for Homeland Security, Center for Resilience Studies, Northeastern University. Available via https://repository.library.northeastern.edu/files/neu:m0419677k. Accessed 26 Oct 2017

  26. Gopalakrisshnan K, Peeta S (2010) Sustainable and resilient critical infrastructure systems—simulation modeling, and intelligent engineering. Springer, Berlin, Heidelberg

    Book  Google Scholar 

  27. Governments of Canada (2009) National strategy for critical infrastructure. Available via https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/srtg-crtcl-nfrstrctr/index-en.aspx, Accessed 26 Oct 2017

  28. Governments of the United States and Canada (2016) Joint United States–Canada electric grid security and resilience strategy. Available via https://www.nrcan.gc.ca/sites/www.nrcan.gc.ca/files/energy/pdf/JOINT%20GRID%20SECURITY%20AND%20RESILIENCE-Strategy_en.pdf. Accessed 26 Oct 2017

  29. Hasan S, Foliente G (2015) Modeling infrastructure system interdependencies and socioeconomic impacts of failure in extreme events: emerging R&D challenges. J Int Soc Prev and Mitig Nat Hazards, May 31, 2015. Available via https://link.springer.com/article/10.1007/s11069-015-1814-7. Accessed 26 Oct 2017

  30. Hokstad PI, Utne B, Vatn J (2012) Risk and interdependencies in critical infrastructures—a guideline for analysis. Springer-Verlag, Berlin, Heidelberg

    Book  Google Scholar 

  31. Hollnagel E (2014) Safety-I and safety-II—the past and future of safety management. CRC Press, Taylor & Francis Group, Boca Raton, London, New York

    Google Scholar 

  32. IAC (2003) Infrastructure interdependencies associated with the August 14, 2003, electric power blackout. Argonne National Laboratory, 21 p

    Google Scholar 

  33. ISO (2012) ISO 22301:2012—societal security—business continuity management systems—requirements. Available via https://www.iso.org/standard/50038.html. Accessed 26 Oct 2017

  34. Joshi R (2011) Data-centric architecture: a model for the era of big data, the world of software development, Dr. Dobb’s. Available via http://www.drdobbs.com/architecture-and-design/data-centric-architecture-a-model-for-th/229301018. Accessed 26 Oct 2017

  35. Leveson NG (2011) Engineering a safer wafer world – systems thinking applied to safety, engineering systems. The MIT Press, Cambridge, MA. Available via https://mitpress.mit.edu/books/engineering-safer-world. Accessed 26 Oct 2017

  36. Linkov IE, Anklam ZA, Collier D, DiMase OR (2014) Risk-based standards: integrating top–down and bottom–up approaches. Environ Syst Decisions 4(1): 134–137. Available via http://link.springer.com/article/10.1007/s10669-014-9488-3. Accessed 26 Oct 2017

  37. Luiijf E, Burger H, Klaver M (2003) Critical infrastructure protection in the Netherlands: a quick-scan. In: Gattiker UE (ed) EICAR Conference Best Paper Proceedings. Danemark, Copenhagen, p 19

    Google Scholar 

  38. NATO (2007) 162 CDS 07 E rev 1—the protection of critical infrastructures. North Atlantic Treaty Organization

    Google Scholar 

  39. NATO (2012) Protecting critical infrastructure: a challenge for NATO and its partners. North Atlantic Treaty Organization. Available via http://www.nato.int/cps/en/natolive/news_88054.htm. Accessed 26 Oct 2017

  40. NERC (2014) Polar vortex review. Available via http://www.nerc.com/pa/rrm/January2014PolarVortexReview/Polar_Vortex_Review_29_Sept_2014_Final.pdf. Accessed 26 Oct 2017

  41. New York Times (2010) Iceland volcano eruption of 2010 (Eyjafjallajokull volcano). The New York Times, Times topics, Tuesday, April 20, 2010. Available via http://topics.nytimes.com/top/news/international/countriesandterritories/iceland/eyjafjallajokull/index.html. Accessed 26 Oct 2017

  42. New York Times (2011) Powerful quake and tsunami devastate northern Japan, Friday, March 11, 2011. Available via http://www.nytimes.com/2011/03/12/world/asia/12japan.html?_r=1&pagewanted=all. Accessed 26 Oct 2017

  43. NFPA (2013) NFPA® 1600—standard on disaster/emergency management and business continuity programs, 2013th edn. NFPA, Quincy, MA, USA

    Google Scholar 

  44. OECD (2011) Future global shocks. Available via http://www.oecd.org/governance/48329024.pdf. Accessed 26 Oct 2017

  45. Ouyang M (2014) Review on modeling and simulation of interdependent critical infrastructure systems. Elsevier Reliab Eng Syst Saf 121:43–60

    Article  Google Scholar 

  46. Pederson P, Dudenhoeffer D,. Hartley S, Permann M (2016) Critical infrastructure interdependency modeling: a survey of U.S. and international research. INL/EXT-06-11464. Idaho National Laboratory, Idaho Falls, USA. Available via http://cip.management.dal.ca/publications/Critical%20Infrastructure%20Interdependency%20Modeling.pdf. Accessed 26 Oct 2017

  47. Petit F, Wallace K Phillips J (2014) Interactive dependencies curves for resilience management. J Bus Continuity Emergency Plan 8(2):141–155. Henry Stewart Publications London, United Kingdom

    Google Scholar 

  48. Petit F, Verner D, Brannegan D, Buehring W, Dickinson D, Guziel K, Haffenden R, phillips, Peerenboom J (2015) Analysis of critical infrastructure dependencies and interdependencies. ANL/GSS-15/4. Argonne National Laboratory, Argonne, IL, USA. Available via https://www.osti.gov/scitech/biblio/1184636-analysis-critical-infrastructure-dependencies-interdependencies. Accessed 26 Oct 2017

  49. Portante EC, Craig BA, Folga SM (2007) NGfast: a simulation model for rapid assessment of impacts of natural gas pipeline breaks and flow reductions at U.S. state borders and import points. In: Henderson SG,. Biller B, HsiehM-H, Shortle J, Tew JD, Barton RR (eds), Proceedings of the 2007 winter simulation conference. IEEE, pp 1118–1126. Available via http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=4419711&tag=1. Accessed 26 Oct 2017

  50. Portante EC, Craig BA, Talaber Malone L, Kavicky J. Folga SM (2011) EPFast: a model for simulating uncontrolled islanding in large power systems. In: Jain S, Creasey RR, Himmelspach J, White KP, Fu M (eds), Proceedings of the 2011 winter simulation conference. IEEE, pp 1758–1769. Available via http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=06147891. Accessed 26 Oct 2017

  51. Portante EC, Kavicky JA, Craig BA, Talaber LE, Folga SM (2017a) Modeling electric power and natural gas systems interdependencies. ASCE J Infrastructure Syst 23(4), December 2017. Available via http://ascelibrary.org/doi/abs/10.1061/%28ASCE%29IS.1943-555X.0000395. Accessed 26 Oct 2017

  52. Portante EC, Kavicky JA,. Craig BA, Talaber LE, Folga SM (2017b) Simulation of the January 2014 polar vortex and its impacts on interdependent electrical natural gas infrastructure. In: Winter simulation conference 2017. Las Vegas, NV, December 3–6, 2017

    Google Scholar 

  53. Public Safety Canada (2014) 2014–2017 action plan for critical infrastructure. Available via https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/pln-crtcl-nfrstrctr-2014-17/index-en.aspx. Accessed 26 Oct 2017

  54. Rinaldi SM, Peerenboom JP, Kelly TK (2001) Identifying, understanding, and analyzing critical infrastructure interdependencies. IEEE Control Syst Magazine, December 2001. Available via http://www.ce.cmu.edu/~hsm/im2004/readings/CII-Rinaldi.pdf. Accessed 26 Oct 2017

  55. Supreme Allied Command Transformation and City of Norfolk (2017) Building resilience: collaborative proposals to help nations and partners. June 2017. Available via https://www.norfolk.gov/DocumentCenter/View/30383. Accessed 26 Oct 2017

  56. The White House (2006) The federal response to hurricane Katrina, lessons learned. Available via https://georgewbush-whitehouse.archives.gov/reports/katrina-lessons-learned. Accessed 26 Oct 2017

  57. The White House (2012) National strategy for global supply chain security. Available via https://obamawhitehouse.archives.gov/sites/default/files/national_strategy_for_global_supply_chain_security.pdf. Accessed 26 Oct 2017

  58. The White House (2013) Presidential policy directive 21: critical infrastructure security and resilience. Available via https://www.dhs.gov/sites/default/files/publications/national-infrastructure-protection-plan-2013-508.pdf. Accessed 26 Oct 2017

  59. TISN (2012) TISN for critical infrastructure resilience, trusted information sharing network. Available via https://www.tisn.gov.au/Pages/default.aspx. Accessed 26 Oct 2017

  60. U.S.-Canada Power System Outage Task Force (2004) Final report on the August 14, 2003, blackout in the United States and Canada: causes and recommendations. Available via https://energy.gov/sites/prod/files/oeprod/DocumentsandMedia/BlackoutFinal-Web.pdf. Accessed 26 Oct 2017

  61. U.S. House of Representatives (2006) A failure of initiative – final report of the select bipartisan committee to investigate the preparation for and response to hurricane Katrina. Available via https://www.uscg.mil/history/katrina/docs/USHouseOfRepKatrina2006MainR1eport.pdf. Accessed 26 Oct 2017

  62. Verner D, Kim K, Petit F (2017) A prioritization algorithm to identify tipping points in critical infrastructure systems. In: 85th military operations research society symposium. June 19–22. United States Military Academy, West Point, NY

    Google Scholar 

  63. Visarraga DB (2011) Understanding complex system: infrastructure impacts. Los Alamos National Laboratory. LA-UR-11-01344. Available via http://permalink.lanl.gov/object/tr?what=info:lanl-repo/lareport/LA-UR-11-01344. Accessed 26 Oct 2017

  64. Wallace WA, Mendonca DM, Lee EE, Mitchell JE, Chow J (2003) Managing disruptions to critical interdependent infrastructures in the context of the 2001 World Trade Center attack. In: Monday JL (ed) Beyond September 11th: an account of post-disaster research, special publication #39. University of Colorado, Natural Hazards Research and Applications Information Center, pp 165–98

    Google Scholar 

  65. WEF (2013) Global risks 2013 eighth edition. Available via http://reports.weforum.org/global-risks-2013/. Accessed 26 Oct 2017

  66. Xiao N, Sharman R, Rao HR, Upadhyaya S (2008) Infrastructure interdependencies modeling and analysis—a review and synthesis. In: AMCIS 2008 Proceedings. 224. Available via http://aisel.aisnet.org/amcis2008/224/?utm_source=aisel.aisnet.org%2Famcis2008F224&utm_medium=PDF&utm_campaign=PDFCoverPages. Accessed 26 Oct 2017

  67. Zhang P, Peeta S (2011) A generalized modeling framework to analyze interdependencies among infrastructure systems. Transp Res Part B Methodological 45(3):553–579

    Article  Google Scholar 

  68. Zimmerman R (2001) Social implications of infrastructure network interactions. J Urban Technol 8:97–119

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Frédéric Petit .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2018 Springer International Publishing AG, part of Springer Nature

About this chapter

Check for updates. Verify currency and authenticity via CrossMark

Cite this chapter

Petit, F., Verner, D., Phillips, J., Lewis, L.P. (2018). Critical Infrastructure Protection and Resilience—Integrating Interdependencies. In: Masys, A. (eds) Security by Design. Advanced Sciences and Technologies for Security Applications. Springer, Cham. https://doi.org/10.1007/978-3-319-78021-4_10

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-78021-4_10

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-78020-7

  • Online ISBN: 978-3-319-78021-4

  • eBook Packages: Law and CriminologyLaw and Criminology (R0)

Publish with us

Policies and ethics