Critical Infrastructure - from Risk Management towards the Protection Management Framework

The paper introduces a holistic critical infrastructure protection management framework (CIPMF) developed by the analogy to the well-known information security and business continuity management frameworks. The paper discusses research in the paper field, identifying the input needed to define CIPMF. The protection system is identified by the critical infrastructure resilience cycle and the management framework is based on the Deming cycle (Plan-Do-Check-Act). To make management more efficient, a ready-made software platform is proposed to support the management processes. The CIPMF concept and its implementation is discussed and concluded. The concept needs exhaustive validation, which is roughly planned.