A coordinated global cyber attack on critical infrastructure has the potential to create chaos and damage on an unprecedented scale, and have devastating consequences. As more and more vital systems become interconnected, the vulnerability of these systems to cyber attacks increases. Governments also rely on critical infrastructure to render effective services. The energy sector is one of the main targets of cyber-attacks against critical infrastructure, but it is not the only one. Transport, public sector services, telecommunications, aviation, Healthcare and critical manufacturing industries, etc are also vulnerable. They are all IoT enabled and experiencing convergence around safety and security.

Disruptions to these kinds of systems, especially those caused by cyberattacks, can have devastating consequences on both Safety and Security. That’s why these systems are called critical infrastructure.

Please see my paper titled "The Impact of Uncertified Practitioners on the Safety and Security of Critical Infrastructure Projects and Operations in the Operational Technology Domain". As the OT-enabled industry moves towards the goal of convergence on safety and security, the risks of uncertified practitioners not being able to protect them and leading critical infrastructure projects or operations in the OT space are numerous and can also have serious consequences. For example, a cyber attack on the electrical grid could cause widespread power outages, leading to a domino effect of disruption in transportation systems, healthcare facilities, and businesses. Similarly, an attack on banking systems could lead to the loss of financial data and disrupt the flow of commerce.

See also my Ph.D. thesis on "Safety and Information Security Fusion in Operational Technology, Towards a New Convergent Holistic Risk Management Model" and Maleh, Y. (2022). IT/OT convergence and cyber security. Computer Fraud & Security Vol. 2021, No. 12.

A string of cyberattacks on critical infrastructure has already occurred in recent years, including the 2015 attack on Ukraine’s power grid, the 2017 'WannaCry' ransomware attack, and the 2018 attack on the US power grid.

To prevent and mitigate the impact of a coordinated global cyber attack on critical infrastructure, it is essential to develop robust cybersecurity standards. This involves implementing security measures such as firewalls, intrusion detection systems, and security monitoring tools to protect critical infrastructure systems from cyber attacks. Further, prevention and mitigation should include strategies that address all three high-level stages of targeted cyber intrusions:

Stage 1 – Malicious software (malware) delivery and execution,

Stage 2 – Internal network propagation and

Stage 3 – Data exfiltration

Additionally, it is important to conduct regular cybersecurity assessments of critical infrastructure systems to identify vulnerabilities and potential attack vectors. Incident response plans should also be developed and tested to help organizations respond quickly and effectively to cyber attacks.

Creating backup systems and redundancies can also help mitigate the impact of a cyber attack on critical infrastructure. For example, having backup generators or alternative power sources can help minimize the impact of a power outage caused by a cyber attack. Redundant communication systems can also help ensure that critical information can still be transmitted even if the primary system is disrupted.

Since a coordinated global cyber attack on critical infrastructure would have significant and far-reaching consequences, to prevent and mitigate the impact of such an event, organizations should strengthen their cybersecurity defenses, conduct regular assessments, establish robust incident response plans, foster collaboration and information sharing, and invest in research and development all in a holistic manner covering the:

This holistic approach involves implementing security measures such as firewalls, intrusion detection systems, and security monitoring tools to protect critical infrastructure systems from cyber attacks. Conducting Regular assessments of critical infrastructure systems can help identify vulnerabilities and potential attack vectors, allowing organizations to take steps to address them before an attack occurs. Establishing and further developing robust incident response plans, and testing incident those response plans to create "muscle (action) memory" which can help organizations respond quickly and effectively to cyber attacks without having to further rehearse, minimizing the impact of such events in real time. the fostering and collaboration around information sharing breaking down of silos within organizations and between industry groups, and government agencies can help see information adequately and quickly shared. Threat intelligence and best practices for preventing and mitigating cyber attacks are sought out, assimilated and applied. The investment in research and development is critical. Investing in research and development can help identify new technologies and approaches to improving cybersecurity and protecting critical infrastructure systems from cyber attacks.

Finally see my paper on "The role of Artificial Intelligence in predicting and preventing cyber-attacks in critical infrastructure" for further inputs ...

Hello Isaac Obiri ,

Great discussion and response by Kerron Boothe Ph.D. .

I'm adding emphasis on cyber threat intelligence which can be a multidisciplinary approach in dealing with this problem. Attacks on infrastructure including chemical, communications, manufacturing, defense, emergency services, nuclear facilities, transportation systems, supply chains, power grids, etc. are on the rise. On May 2021, we saw Colonial Oil Pipeline was attacked by a targeted ransomware and thousands of gas stations run out of gas causing cascading events of failure and panic.

So far, attacks on this kind of infrastructure goal to make them unavailable or alter them. As water is essential to public health, attacks will target water systems. So, there is a need for taking those hazards seriously and include in risk modeling, preparedness, mitigation, response, and recovery; to take strategic decisions. Here, I see cyber threat intelligence becoming essential to incorporate for awareness and preventive measures. One needs to identify assets, potential targets, vulnerabilities in policies, human factors, designs, systems, changes in social, or potential attacks from social groups, etc.

A coordinated global cyber attack on critical infrastructure would have disastrous consequences. It could disrupt essential services such as power, water, and telecommunications, leading to widespread chaos and disruption. It could also cause physical damage to the infrastructure, leading to major economic losses. To prevent and mitigate such an attack, organizations should implement a comprehensive security strategy that includes a multi-layered approach to cybersecurity. This includes strong authentication measures, secure networks and systems, regular patching and updates, monitoring and detection systems, and incident response plans. Additionally, organizations should educate employees and users on security best practices and implement effective user awareness and training programs. Finally, organizations should collaborate with public and private sector stakeholders to share information and best practices on cybersecurity, and develop coordinated plans to respond to cyber incidents.