Risk governance

Good Governance for Critical Infrastructure Resilience


Critical infrastructures are the backbone of modern, interconnected economies. The disruption of key systems and essential services - such as telecommunications, energy or water supply, transportation or finance - can cause substantial economic damage.

This report looks at how to boost critical infrastructure resilience in a dynamic risk landscape, and discusses policy options and governance models to promote up-front resilience investments. Based on an international survey, the report analyses the progressive shift of critical infrastructure policies from asset protection to system resilience. 

The findings are reflected in a proposed Policy Toolkit for the Governance of Critical Infrastructure Resilience, which can guide governments in taking a more coherent, preventive approach to protecting and sustaining essential services.


Good Governance for Critical Infrastructure Resilience

Read the full report

Comprehensive Policy Framework

The OECD Policy Toolkit on Governance for Critical Infrastructure Resilience – chapter 5 of the publication - provides a comprehensive policy framework to strengthen critical infrastructure resilience and overcome related governance challenges. The Toolkit emphasizes the importance of adopting a system approach for critical infrastructure resilience, based on partnerships between governments and critical infrastructure operators. It aims at inspiring governments’ policy reforms towards improved continuity of these essential services.


Effective Governance Models 

The OECD case-study of Finland’s electricity transmission and distribution system – Chapter 4 of the publication - illustrates how governments can set-up an effective governance model that fosters investments in infrastructure resilience. With ambitious resilience targets, Finland has been nurturing a cooperative framework to strengthen critical infrastructure resilience that stresses public private cooperation, information sharing and consensus building. Nevertheless, new challenges have emerged including how to address the implications in terms of costs for customers, the difference between larger and smaller operators’ capacities, as well as the implications of digitalisation and climate change.


 System thinking for critical infrastructure resilience and security - OECD/ JRC Workshop

OECD Conference Centre, Paris
24-25 September, 2018

This joint workshop, organised by the OECD High-Level Risk Forum and the European Commission Joint Research Centre, invites experts from the policy community, infrastructure operators, and academia to exchange on how best to apply system-thinking to strengthen critical infrastructure resilience. From natural hazards to cyber-attacks, terrorism and hybrid threats, the changing risk landscape requires holistic systems approaches for boosting the resilience of these interconnected networks.


As digitalisation transforms infrastructure systems, and with infrastructure investments globally on the rise, we have an opportunity to re-evaluate critical infrastructure policies across OECD countries and beyond. What is the role for governments in boosting critical infrastructure resilience? How should they engage critical infrastructure operators – public and private – in strengthening their resilience efforts? How can trust be built and information shared? How can government and operators share the costs of resilience investments?


The workshop aims to stimulate dialogue among stakeholders and develop holistic policy guidance for the resilience of critical infrastructure. The workshop will feature focused discussions and break-out groups on the risks threatening critical infrastructure, the tools, methods and data needs to map inter-dependencies, and the good policy practices for strengthening resilience. It will also provide an opportunity to exchange ideas on public policy tools to overcome governance gaps in critical infrastructure resilience.



Prof. Stephen Flynn, Global Resilience Institute, Northeastern University

Prof. Enrico Zio, European Foundation for New Energy - EDF, CentraleSupélec, Université Paris Saclay

Prof. Mike Corcoran, Cyber Security Centre, the University of Warwick

Dr. Erich Rome, Fraunhofer IAIS

Mr. Duane Verner, Argonne National Laboratory, Optimization Infrastructure Resilience and Security

Prof. Aleksandar Jovanovic, European Virtual Institute for Integrated Risk Management

Dr. Stefan Hochrainer-Stigler, International Institute for Applied System Analysis

Dr. Igor Linkov, US Army Corps of Engineers

Mr. Ricardo Messias, Energias Portugal

Mr. Jean Luc Planchet, SNCF Reseau

Mr. Zoltán Székely, Hungarian Academy of Science

Cess van de Guchte, Deltares

 Mr. Bob Kolasky, US Department of Homeland Security

Mr. HP Schreinemachers, Ministry of Justice and Security, the Netherlands

Dr. Stefan Brem, Critical Infrastructure Protection Coordinator, Switzerland

Dr. Pierre Kobes, Siemes AG

Mr. Ryan Schwartz, Critical Infrastructure Policy Development, Public Safety Canada

Mr. Georgios Eftychidis, Greek Center for Security Studies

Mr. Mikko Vähä-Sipilä, National Emergency Supply Agency, Finland

Mr. Adrián Nieto Muratalla, Ministry of the Interior Mexico

Mr. Michael Rogge, Amprion GmbH

Prof. Dieter Helm, Oxford University

Mr. Tomazs Szewczyk, European Network of Transmission System Operators

OECD Secretariat

Ms. Eva-Maria Engdahl, DG Home, European Commission

Meeting documents:


Related information:


Advancing Societal Resilience: The role of systems thinking for critical infrastructure security”  - Special event of the OECD New Approaches for Economic Challenges, 25 September 2018