Risk Governance of European Critical Infrastructures in the ICT and energy sector
Cross border energy infrastructure has been identified as high priority European Critical Infrastructure (ECI) by the European Commission. The energy industry is particularly dependent on Information and Communication Technology (ICT) systems, which are also considered to be ECI. The European Commission therefore needs to understand the increasing interconnectedness between these two sectors, the types of threats posed, and the defences that protect the flow of energy across EU borders. Risk Solutions worked closely with AEA Technology to develop a Risk Governance Framework for identifying and managing the vulnerability of cross-border energy supplies (oil, gas, electricity) to threats related to ICT systems. The risk governance framework was created through a process of consultation with experts; literature review; stakeholder questionnaires; and expert workshops. It was based on the internationally respected International Risk Governance Council (IRGC) standard for risk governance (www.irgc.org). When used by member states it will encourage a more consistent approach between organisations and member states for identifying and managing risks. In this way, best practice can be communicated and shared across Europe, and the EU can be assured that changes in technology and markets are not introducing new threats to cross border energy supplies. |
