Massimo Ferrari, Senior Risk Engineer Casualty
22nd May 2019 – CRO Assembly
CRO Assembly 2019 | Vulnerability of critical infrastructure
What are we going to talk about?
2
• Vulnerability of critical
infrastructure (Massimo)
• Critical infrastructure, Cyber and
worse (Eric)
• Round table – Open discussion
2CRO Assembly 2019 | Vulnerability of critical infrastructure
CRO Assembly 2019 | Vulnerability of critical infrastructure
Chemical Commercial facilities Communications Critical manufacturing Dams Defence industrial base
Emergency services Energy Financial services Food and agriculture Government facilitiesHealthcare and public
health
Information technologyNuclear reactors,
materials and wasteTransportation systems
Water and wastewater systems
3
How is a critical infrastructure defined ? Assets and systems essential for the functioning of a society and economyDepartment of Homeland Security defines 16 sectors
Department of Homeland Security - www.dhs.gov/cisa/critical-infrastructure-sectors
CRO Assembly 2019 | Vulnerability of critical infrastructure 4
Infrastructure vulnerable to age in a fast pace worldRating the US infrastructure system
Fatalities
Vehicle maintenance costs
Weight limitations
Road stoppages
Stress on other roads
Emergency maintenance
Degradation rateAmerican Society of Civil Engineers www.infrastructurereportcard.org
CRO Assembly 2019 | Vulnerability of critical infrastructure 5
Just thinking about roads – not bridges, dams, viaducts, water facilitiesIntegrated view
Fatalities
Vehicle maintenance costs
Weight limitations
Road stoppages
Stress on other roads
Emergency maintenance
Degradation rate
CRO Assembly 2019 | Vulnerability of critical infrastructure 6
Consequences - Failure to act2 trillion US$ of funding gap
www.infrastructurereportcard.org
2 trillion US$ of funding gap
CRO Assembly 2019 | Vulnerability of critical infrastructure 7
Changes surrounding conditions: slow and constant stress increaseTraffic, heavy traffic, maintenance ⇒ design not coping with the changes
CRO Assembly 2019 | Vulnerability of critical infrastructure 8
Changes surrounding conditions: disruptive eventsShale oil and oil sands ⇒ Oil by train
CRO Assembly 2019 | Vulnerability of critical infrastructure 9
Lac Mégantic Oil Train Disaster6th July, 2013
• 63 of 72 crude oil tank derailed
• 47 fatalities, 2’000 evacuated
• Large part of the village destroyed
• Environmental contamination from
the 38’000 bbl crude oil spilled
CRO Assembly 2019 | Vulnerability of critical infrastructure
Construction of infrastructure – Industry trendsEmerging risks
10
Mega projects
Time and cost pressure
New building materials
Aesthetics of engineering
Automation in design
Sensors and IoT
CRO Assembly 2019 | Vulnerability of critical infrastructure 11
Which are the critical infrastructure sectors most exposed to cyber risks?One possible answer
Chemical Commercial facilities Communications Critical manufacturing Dams Defence industrial base
Emergency services Energy Financial services Food and agriculture Government facilitiesHealthcare and public
health
Information technologyNuclear reactors,
materials and wasteTransportation systems
Water and wastewater systems
Department of Homeland Security - www.dhs.gov/cisa/critical-infrastructure-sectors
CRO Assembly 2019 | Vulnerability of critical infrastructure 12
CRO Assembly 2019 | Vulnerability of critical infrastructure
Legal notice
13
©<year> Swiss Re. All rights reserved. You are not permitted to create any modifications
or derivative works of this presentation or to use it for commercial or other public purposes
without the prior written permission of Swiss Re.
The information and opinions contained in the presentation are provided as at the date of
the presentation and are subject to change without notice. Although the information used
was taken from reliable sources, Swiss Re does not accept any responsibility for the accuracy
or comprehensiveness of the details given. All liability for the accuracy and completeness
thereof or for any damage or loss resulting from the use of the information contained in this
presentation is expressly excluded. Under no circumstances shall Swiss Re or its Group
companies be liable for any financial or consequential loss relating to this presentation.