European Commission: Home Affairs

Print versionDecrease textIncrease text

Protection of critical infrastructure

Critical infrastructure is an essential asset for the maintenance of vital societal functions. Damage to the critical infrastructure, its destruction or disruption by natural disasters, terrorism, criminal activity or malicious behaviour, may have negative consequences for the security of the EU and the well-being of its citizens.

Increasing protection

Reducing the vulnerabilities of critical infrastructure is one of the major objectives of the EU. An adequate level of protection must be ensured and the detrimental effects of disruptions on the society and citizens must be limited as far as possible.

The European Programme for Critical Infrastructure Protection (EPCIP) is a package of measures aimed at improving the protection of critical infrastructure in Europe - across all EU States and in all relevant sectors of economic activity. The threats to which the programme aims to respond are not only confined to terrorism, but also include criminal activities, natural disasters and other causes of accidents. In short, it seeks to provide an all-hazards approach. The EPCIP is supported by regular exchanges of information between EU States within the ECIP Contact Points meetings.

A key element of this programme is the 2008 Directive on European Critical Infrastructures. It establishes a procedure for identifying and designating European Critical Infrastructures (ECI) and a common approach for assessing the need to improve the protection of such infrastructures. Currently, the Directive's scope is limited to the energy and transport sectors. Once implemented, a review will be carried out to assess its impact and the need to include other sectors, e.g. the Information and Communication Technology (ICT) sector.

The Directive also requires owners/operators of designated ECI to prepare Operator Security Plans (advanced business continuity plans) and nominate Security Liaison Officers (linking the owner/operator with the national authority responsible for critical infrastructure protection).

Linking resources

The Commission has prepared a roadmap for the creation of a European Reference Network for Critical Infrastructure Protection (ERN-CIP). The aim it to link together existing European laboratories and facilities, in order to carry out critical infrastructure-related security experiments and test new technology, such as detection equipment.

The Commission is also developing a Critical Infrastructure Warning Information Network (CIWIN). This Network will provide for a multi-level communication system for exchanging critical infrastructure protection-related ideas, studies and good practices. It will also serve as a repository for such information. CIWIN will move to its production phase in 2012.

Review

The European Programme for Critical Infrastructure Protection and the 2008 Directive on European Critical Infrastructures are currently reviewed. An external evaluation study on the impact of the Directive and a review conference on 14-16 March 2012 have delivered first results in this process (to request further details please contact HOME-EPCIP@ec.europa.eu). The review will be continued over the next months, including stakeholder meetings and consultations. The Commission intends to adopt a proposal for a revised critical infrastructure protection policy by the end of 2012.