Systemic challenges for critical information infrastructure protection

This paper examines the challenges presented by the need to assure the information infrastructure. First, the concept of critical infrastructures is discussed, along with their features from the security viewpoint. Then, the critical information infrastructure is analyzed, reflecting on the requirements and constraints for its protection, and the different perspectives that can be given to the problem. In particular there is an account of the main questions that have to be answered when determining which type of protection could be appropriate. Finally, the main systemic challenges found in the discussion are summarized with reference to both the information infrastructure internal organization, and the risk-related decision making processes concerned with its protection.