Long abstract

The Development of Policies for the Protection of Critical Information Infrastructures (CII)

The 2006 OECD study offers an analysis of the CII security policies in four countries - Canada, Korea, the United Kingdom, and the United States - with a focus on the drivers for and challenges to their development. It examines each country’s definition of the CII, risk management strategies, frameworks and policies regarding the CII, challenges to information sharing, and cross-border cooperation for addressing the risk to the CII. The report also identifies commonalities and differences in policies for protecting the CII across the countries. The study is expanded in 2007 to 3 additional countries.