Attacks on critical infrastructure
Power grids, water systems and transport networks face both physical and cyber attack. Hardening the control systems behind them, defending the networks around them and countering the drone threat above them keeps essential services running under pressure.
The systems a country cannot function without
Power, water and transport are the systems on which every other national function rests, and that makes them a first-order target. An adversary who can darken a grid, contaminate a water supply or halt a transport network can coerce a government without firing a conventional shot. The threat now arrives from several directions at once: a cyber intrusion into the control systems, a physical or drone attack on the plant itself, and the cascading failures that follow when one utility depends on another. Defending them piecemeal leaves whichever vector is least protected as the open door.
For the operators and the state, the difficulty is that these systems were built for reliability, not for adversarial resilience. Control networks often predate the current threat, exposing supervisory systems that were never designed to be attacked. Physical sites sprawl across terrain, and the airspace above them is now contested by cheap drones. Keeping essential services running under deliberate pressure requires protecting the control layer, the surrounding networks and the airspace together, as one problem.
Hardening the controls, defending the network, clearing the air
Infrastructure hardening reduces the attack surface of the supervisory control systems behind power, water and transport, so an intruder cannot manipulate a process, defeat a safety interlock or force a shutdown. Around those controls, Defensive cybersecurity provides continuous monitoring and incident response, detecting and containing an intrusion before it reaches the systems that matter and keeping the operator watching around the clock rather than discovering a breach after the fact.
Above the site, Counter-UAS & loitering munitions address the drone threat to physical plant, detecting and defeating the small aircraft that can surveil or strike a substation, pump station or rail node. Because all three come from independent, non-aligned makers, the protection is accountable to the national operator and government, with no foreign disclosure obligation over the vulnerabilities of the infrastructure a nation depends on.
From assessment to resilient essential services
The programme opens with assessment: identifying which control systems are most exposed, which sites are most critical and where a single failure would cascade. That prioritisation lets a finite budget harden what matters most first, rather than spreading protection thinly and evenly across systems of very different importance.
The next phase hardens those control systems, stands up continuous cyber defence around them and adds counter-drone protection to the most exposed sites, so physical and cyber layers reinforce one another. The final phase is sovereign operation, with in-region teams running the monitoring, sustaining the hardened systems and refreshing the defence as threats evolve. The outcome is essential services that keep running under deliberate attack, defended by teams accountable to the nation.
Why it matters
Power, water and transport are the systems on which every other national function rests, so they are a first-order target rather than an ordinary asset to protect. An adversary who can darken a grid, contaminate a water supply or halt a transport network can coerce a government without firing a conventional shot, and can do so through a control-system intrusion, a drone over the plant or the cascading failure of one utility onto another. Left defended piecemeal, whichever vector is least protected becomes the open door, and the state discovers the gap only when a service it cannot do without has already failed.
Agencies involved
Critical national infrastructure authority
Owns the mandate to keep essential services running and sets the resilience standard the operators must meet. It needs a defensible assessment of where infrastructure is weakest so a finite protection budget hardens what matters most first, and it carries the political cost when a service fails under attack.
Utility and network operators
Run the grids, water systems and transport networks day to day, on control systems often built for reliability rather than for adversaries. They need the supervisory layer hardened, the surrounding networks monitored and the airspace above the plant cleared without stopping the service they exist to deliver.
National cybersecurity authority
Holds the picture of intrusions against national systems and coordinates incident response across operators. It needs continuous monitoring at the operator level and a picture it can act on before an intrusion reaches the process it was aimed at.
Interior ministry and site security forces
Protect the physical plant and the airspace over it, where cheap drones can now surveil or strike a substation, pump station or rail node. They need the aerial threat detected and defeated as part of the same defence, not treated as a separate problem from the cyber one.
Defence and homeland-security leadership
Treat infrastructure resilience as a matter of national survivability under deliberate pressure. They need physical and cyber protection reinforcing one another under national control, with no obligation to disclose to a foreign party where the nation's infrastructure is weakest.
Consequences of inaction
Security
A grid, water system or transport network that can be darkened, contaminated or halted becomes a lever an adversary can pull to coerce a government, a strategic vulnerability that exists whether or not it is ever used, and one that invites testing precisely because it is known to be there.
Security
Because utilities depend on one another, a single unhardened control system is a route to a cascading failure: an intrusion or strike on the least-defended vector can bring down services far beyond the one first attacked, turning a local breach into a national one.
Economic
Interrupted essential services stop the economy that depends on them (production halts, commerce stalls and recovery costs mount) while the reconstruction of trust in a service that has failed under attack is slower and dearer than the hardening that would have prevented it.
Economic
Dependence on a foreign supplier for the defence of national infrastructure carries its own price: the knowledge of where the nation is weakest sits outside national control, and the protection can be shaped by another government's priorities rather than the operator's.
Limits of current approaches
- Control networks often predate the current threat, exposing supervisory systems that were never designed to be attacked and cannot simply be patched into resilience.
- Defending the physical site, the network and the airspace as separate problems leaves the seams between them (the drone over a hardened control room, the intrusion into an unguarded network) as the open door.
- Physical sites sprawl across terrain and the airspace above them is now contested by cheap drones that a perimeter guard on the ground cannot see or reach.
- Spreading protection thinly and evenly across systems of very different importance leaves the most critical single-point failures no better defended than the least.
- Reliance on a foreign supplier for infrastructure defence means the sensitive picture of national vulnerabilities is held outside the state, with a disclosure obligation attached to it.
Solution architecture
The mission is not a single product but a layered defence that treats the control layer, the surrounding networks and the airspace as one problem, hardened in the order of what a nation cannot function without. It builds on the Infrastructure Hardening approach at the control layer, extends it with continuous cyber defence around it and closes the airspace above the plant with Counter-UAS & loitering munitions, all accountable to the national operator and government.
Control-system hardening
Infrastructure Hardening reduces the attack surface of the supervisory control systems behind power, water and transport, so an intruder cannot manipulate a process, defeat a safety interlock or force a shutdown, stopping an intrusion from translating into a real-world failure of the service.
Network defence and monitoring
Defensive cybersecurity provides continuous monitoring and incident response around the hardened controls, detecting and containing an intrusion before it reaches the systems that matter and keeping the operator watching around the clock rather than discovering a breach after the fact.
Airspace protection
Counter-UAS & loitering munitions detect and defeat the small aircraft that can surveil or strike a substation, pump station or rail node, closing the airspace over the most exposed sites so the physical and cyber layers reinforce one another rather than leaving the air as the unguarded vector.
Prioritisation and assessment
An assessment layer identifies which control systems are most exposed, which sites are most critical and where a single failure would cascade, so hardening, cyber defence and counter-drone protection are aimed at what matters most first rather than spread evenly across systems of unequal importance.
Command and operator layer
A single operations picture ties the control-system, network and airspace defences together, keeping the operator's teams watching all three vectors at once and directing response where a real incident is developing rather than to whichever alarm sounds loudest.
Deployment model
- A standing, national infrastructure defence rather than a one-off installation, tasked on national priorities and retained under national control.
- Capability owned outright by the national operator and government: hardening, cyber defence and counter-drone protection from independent, non-aligned makers, with no foreign disclosure obligation over the nation's vulnerabilities.
- Layered across control systems, networks and airspace together, so no single least-protected vector is left as the open door.
- Aimed first at the most critical systems and the single failures that would cascade, so a finite budget hardens what matters most before spreading wider.
- Operated in-region by trained national teams and analysts, supported in-region rather than remotely.
Data & command flow
- The assessment of exposed control systems and cascading single points feeds the operations picture as a prioritised map of what to defend first.
- Hardened control systems reject the manipulation, interlock-defeat and forced-shutdown attempts an intruder would use to translate a breach into a failure.
- Continuous cyber monitoring surfaces intrusion attempts against the surrounding networks as incidents, contained before they reach the process they were aimed at.
- Counter-drone sensing feeds the airspace picture over exposed sites, detecting and defeating the small aircraft that would surveil or strike the plant.
- The operator's teams receive a unified picture of control-layer, network and airspace threats, and direct response where a real incident is developing.
- All data (the vulnerability assessment, the intrusion record and the airspace picture) is retained under national control, so the sensitive picture of national infrastructure belongs to the operator and government outright.
Implementation stages
Assessment and prioritisation
The programme opens by identifying which control systems are most exposed, which sites are most critical and where a single failure would cascade, so a finite budget hardens what matters most first rather than spreading protection thinly across systems of very different importance.
Hardening and continuous defence
Those control systems are hardened, continuous cyber defence is stood up around them and counter-drone protection is added to the most exposed sites, so physical and cyber layers reinforce one another rather than leaving a seam between them.
Unified operations picture
The control-layer, network and airspace defences are tied into a single operations picture so the operator's teams watch all three vectors at once and direct response where a real incident is developing.
Sovereign operation
In-region teams are trained to run the monitoring, sustain the hardened systems and refresh the defence as threats evolve. The end state is essential services that keep running under deliberate attack, defended by teams accountable to the nation.
Indicative timeline
- Typically phased over successive budget cycles rather than delivered in a single procurement.
- Sequenced so an assessment of the most critical exposures is in hand before hardening assets are committed.
- Subject to the scope agreed at briefing against the specific infrastructure, control systems and sites to be defended.
- Paced by the transfer to sovereign operation and the evolution of the threat, not by an external delivery schedule.
Qualitative only. Timelines are phased against the scope agreed at briefing: no dates or durations are published.
Indicative cost categories
Cost categories only, where defensible. Figures are configuration-dependent and shared under briefing against your requirement: never published.
Success metrics
| Contained intrusions | Intrusion attempts against control networks are detected and contained before they reach the process they were aimed at, observed by breaches that stop short of a real-world service failure. |
| Protected airspace | The small aircraft that would surveil or strike exposed sites are detected and defeated over the plant, observed by the closing of the aerial vector that a ground perimeter cannot cover. |
| Hardened priority systems | The most critical control systems and cascading single points are protected first, observed by the reduction of unhardened exposures where a single failure would spread. |
| Service continuity under pressure | Essential services keep running under deliberate attack rather than failing, observed by the maintenance of power, water and transport through incidents that would previously have interrupted them. |
| Sovereign defence | The defence is run and sustained by national teams and the vulnerability picture stays under national control, observed by the reduction of dependence on an external contractor or a foreign disclosure obligation. |
Sovereignty & localisation
- Buyer ownership of the vulnerability assessment, the intrusion record and the airspace picture the system produces.
- Hardening, cyber defence and counter-drone protection sourced from independent, non-aligned makers, so no foreign party holds the picture of where national infrastructure is weakest.
- Local control of monitoring configuration, hardening policy and counter-drone rules of engagement.
- Options for local integration with national operators' control systems, security operations and site protection.
- Analyst, operator and site-team training with train-the-trainer programmes to build a sovereign infrastructure-defence bench.
- Progressive technology transfer and localisation of the defence capability, scoped per programme.
Sustainment
- In-region maintenance and support rather than remote, supplier-gated support, so the defence keeps running without an external contractor on call.
- A spares and support arrangement scoped to keep the hardening, cyber defence and counter-drone layers available across their service life.
- A trained national bench of operators, analysts and maintainers that outlasts the initial delivery and refreshes the defence as threats evolve.
- A path to independent sustainment so the infrastructure defence is the nation's to run, not a service it rents.
Next step on this mission
Relevant capability
Critical infrastructure resilience
Capability page →
Monitoring and incident response
Capability page →
Layered defence against the drone threat
Capability page →Relevant solutions
Power, water, transport and port systems assessed, hardened and watched continuously, by a team with no foreign government to report the findings to.
Solution page →Layered defence against hostile unmanned aircraft: detection, tracking and defeat priced for the mass threat rather than a missile economy that empties the magazine first.
Solution page →Who faces this problem
Frequently asked questions
Why must critical infrastructure be defended physically and digitally at once?
Because an adversary attacks whichever vector is least protected. A grid or water system can be hit through its control network, through a physical or drone strike on the plant, or through cascading failures between utilities. Hardening the controls, defending the surrounding network and countering the drone threat together closes the open door piecemeal defence leaves.
What does hardening control systems actually prevent?
Infrastructure hardening reduces the attack surface of the supervisory systems behind power, water and transport, so an intruder cannot manipulate a process, defeat a safety interlock or force a shutdown. It stops an intrusion from translating into a real-world failure of the service.
Who holds the knowledge of a nation's infrastructure vulnerabilities?
The national operator and government do. The hardening, cyber defence and counter-drone capability all come from independent, non-aligned makers, so the assessment of where infrastructure is weakest stays under national control, with no foreign disclosure obligation attached to that sensitive picture.
Related problems
Ministries, registries and national databases are under continuous attack from criminal and state-linked actors. Around-the-clock defensive operations, authorised red-teaming and architectures for disconnected environments protect the systems a state runs on, accountable to your government, not a foreign one.
Problem pageCheap unmanned aircraft now threaten airports, energy sites, borders and public events in every region. Layered counter-UAS, combining detection radar tuned to small slow targets, passive sensing and defeat systems, is the affordable answer recent conflicts demand.
Problem pageTapping, bunkering and sabotage of oil infrastructure drain national revenue and cause environmental damage. Persistent overhead surveillance detects illegal connections and vessel movements, while control-system hardening protects the pipeline network itself.
Problem page