1 1

Critical Infrastucture Protection

a strategic opportunity for Countries’ modernization and technological autonomy

Genoa – CPEXPO, Inauguration Day, 29 October 2013

Lorenzo Fiori Senior Vice President - Strategy

2 2

Quality of Infrastuctures……..

……….progress, development

and ……..

……… security

3 3

1971 : first e-mail 2013 : 144,8 billions of e-mail per day 2015: 1 zettabyte (1021) of data on internet 2020 : 50 billions of devices connected

The digital “evolution / revolution”

4 4

SECURITY CHALLENGE ON GLOBAL SCALE

Internet

Finance and Banking

Natural Resources Energy: production and grid

Transport

Emergency Services Defense

Health

Gov.nt Services

Enterprise

CYBER THREATH:

5 5

Physical & logical Interoperability

SOA Architecture: Open, Multi-level, Net-centric

Integration & Interoperability

6 6

Sesar: air traffic interoperability

7 7

physical

SECURITY

Relevance

Vulnerability

Interdependency

Complexity

Interoperability

logical

logical physical

Critical Infrastructure

8 8

9 9

CNI protection: benefit or cost?

10 10

Public Private Partnership

11 11

2008 2009 2010 2011 2012 -3,7% -14,3% +2,3% +7,6% +2,0%

2007

Estonia

Debito/PIL -0,3% (*)

(*) tra I più bassi nell’EU 27 Source Eurostat news release 64/2013

12 12

Observatory on “The Costs of No Action (CNA)” (*)

A new point of view:

from “investment” cost to “not doing” cost

Sector CNA €/000

Energy 65.800.000

Energy efficency 46.000.000

Highway 102.600.000

Railway 132.400.000

Logistics 73.100.000

Waste 10.100.000

Water 44.300.000

Total CNA 474.300.000

475 bn € in 16 years:

The economical, environmental and social cost (missed benefits) of

not doing infrastructures in Italy

CNA derives from the lack of infrastructures but also from their misuse and unavailability

Not only new infrastructures but also technical innovation and security investments

(*) Source:

13 13

The Engineers don’t live!

They deliver!

14 14

Investment Multiplier

Up to x5

Investment Return

about 2 / 3 years

Opportunity / Objectives

15 15

• Rationality

• Sobriety

• Focalization

• Sustainability

• Semplification

• Re-use

•Divestment

Design Criteria

16 16

Others

Banks Energy

Food Chain

Providers

TelCo

Transport

Health

Catalyser

Preferably a

Private

Stakeholder for

technology,

products and

solutions

Public Stakeholder

Gov. Institutions accountable for

the CNI protection

Hub

Windmill

Spoke

Model

Spoke

Spoke

Spoke

Spoke

Spoke

Spoke

17 17

• Identification of new requirements/ needs for security, either physical and

logical / cyber

• Technology innovation / Technology insertion

• Maintenance and update of legacy systems

• CNI operators’ advanced training

• Secure supply chain

• Real -time services for threat monitoring / situation awareness

• Collaboration with Academy and Research Center to assess threath evolution

and countermeasure / preventative tools

Security-by-design, embedded in any new solutions

The role for the “Catalyser”

18 18

The relevance of incentives

19 19

Cyber Security

& Defence

Customs

Law Enforcement Social Security

Postal services

Other Public Institutions

ANSPs

Banking / Finance

SMB and large enterprises

Civil Protection / Emergency Services

Public Entities

Defence

Telecom Operators

expertise and customers’ base:

SOC Chieti

HPC

SCOC

20 20

for the protection of our critical infrastructures

Today, Tomorrow, Together

Thanks