The Infrastructure that the Runs the World

Critical Infrastructure protection policy has been a focus of the US government since 2012. Almost a decade later, evolutions in both the threat landscape and the interagency community invite the US government to revise and update this critical policy.

Projects

Critical infrastructure cybersecurity prioritization: A cross-sector methodology for ranking operational technology cyber scenarios and critical entities

Modernizing critical infrastructure protection policy: Seven perspectives on rewriting PPD21

Targeting Ukraine through Washington: Russian election interference, Ukraine, and the 2024 US election

To defend US elections, we must recognize that the fault is in ourselves

Defining Russian election interference: An analysis of select 2014 to 2018 cyber enabled incidents

The Atlantic Council’s Cyber Statecraft Initiative, under the Digital Forensic Research Lab (DFRLab), works at the nexus of geopolitics and cybersecurity to craft strategies to help shape the conduct of statecraft and to better inform and secure users of technology.

learn more

Critical Infrastructure Policy

Wed, Jul 24, 2024

OT Cyber Policy: The Titanic or the Iceberg

Current policy does not address the issue of cyber-physical security with a systemic approach, instead focusing with tunnel vision on specific events. This analysis uses the iceberg model for systems thinking to address policy gaps in the OT ecosystem, detailing recommendations for the Cybersecurity and Infrastructure Security Agency (CISA).

by Danielle Jablanski

Critical Infrastructure Policy Operational Technology
A wounded woman uses a phone at Nasser Hospital after an airstrike in the city of Khan Yunis, amid the continuing conflict between Israel and the Palestinian Hamas movement.

Fri, Nov 3, 2023

How information travels during Gaza’s communications blackouts

People in Gaza turn to eSIMS and other solutions amid cellular and internet outages

by Layla Mashkoor

Critical Infrastructure Policy Gaza