In the recent years, the focus has moved from critical infrastructure protection to that of resilience. But how do we know whether a critical infrastructure is resilient or not, how can it be evaluated, measured and enhanced?
Drawing on, combining and developing the ideas of the existing literature and practices, the current report develops a holistic, easy-to-use and computable methodology to evaluate critical infrastructure resilience, called Critical Infrastructure Resilience Index (CIRI). The methodology is applicable to all types of critical infrastructure, including a possibility to tailor it to the specific needs of different sectors, facilities and hazard scenarios. The proposed methodology is especially suitable for organizational and technological resilience evaluation, but permits including also elements of societal resilience indicators to the evaluations.
The user of this methodology is supposed to be the operator of critical infrastructure, or part of it, in the spirit of self-auditing. In case it would be implemented in a wider scale, in cooperation between the operators and authorities, it would give the authorities a holistic picture about the respective society’s critical infrastructure resilience.
In this report, we draw a concise picture of the methodology and illustrate how this methodology could be applied to a specific infrastructure and hazard scenario.
Please note: this deliverable is made available here in draft format until it has been formally accepted.