Protecting the cybersecurity of critical infrastructures and their supply chains  – ICC – International Chamber of Commerce

Critical infrastructure and essential services form the backbone of every country’s development, cutting across the domains of energy, water, heating, transportation, finance and communication to name a few. Disruptions to these infrastructures can have profound consequences on public safety, economic stability, and national security, underscoring the imperative for robust protection measures.   

At its core, this paper emphasises the indispensable role of critical infrastructures and essential services in sustaining societal functions and economic activities. ICC analyses the multifaceted challenges inherent to their protection and navigates through these challenges, offering a coherent strategy for resilience founded on international and multistakeholder collaboration. 

Who is behind the cyber threats targeting critical infrastructures? 

Cyberthreats to critical infrastructure and essential services come from diverse actors, ranging from states to cybercriminal organisations, each motivated by distinct objectives. These threats encompass sophisticated malware, supply chain attacks, and physical intrusions, posing significant risks to public safety and economic stability. The potential cascading impacts of these threats highlight the need for robust protection measures. 

What are the challenges in protecting critical infrastructures from cyber threats? 

One of the key challenges lies in defining critical infrastructure and essential services. Various sectors are considered critical in different jurisdictions. The concept of essential services is dynamic and evolving as digital technologies advance.  

Moreover, the interdependence of these services with other infrastructures further complicates their protection, requiring a nuanced approach.  

Similarly, despite the existence of cybersecurity frameworks, implementation remains a challenge, particularly in aligning standards across jurisdictions and sectors.  

Public-private collaboration is essential in this endeavour but is hindered by differing regulatory frameworks and responsibilities. Securing supply chains is also crucial, given the varying ownership models and regulatory landscapes globally. 

What is needed to safeguard critical infrastructures from cyber threats? 

To address these challenges, a comprehensive approach is needed: 

• Transnational agreements:  Establish baseline cybersecurity standards across supply chains, reducing complexity and enhancing resilience.  
• Coordinated efforts: Requirement to mitigate cyber threats, combat criminal groups and state-sponsored actors. 
• Incentivise cybersecurity investment: balancing economic profitability with public investment is crucial to ensure the resilience of essential services and critical infrastructure. 

In conclusion, safeguarding critical infrastructure and essential services requires a coordinated, multifaceted approach involving: 

•  international cooperation 
• policy enhancements, and 
• public-private partnerships.  

Through a comprehensive analysis, ICC not only highlights the urgency of the task at hand but also offer practical recommendations to address it.