---
title: 5-Point Strategy for Securing Critical Infrastructure
description: The threat to critical infrastructure is real & a successful attack could be potentially devastating to business, government and the public.
image: https://www.resilientiq.com/hubfs/Blog_Images/5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg
---

[![NEW_ResilientLogoShadow_FINALwhite.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/NEW_ResilientLogoShadow_FINALwhite.png?width=1210&height=254&name=NEW_ResilientLogoShadow_FINALwhite.png "NEW_ResilientLogoShadow_FINALwhite.png")](http://resilientiq.com)

![Resilient-Advanced-Network-Solutions 4.jpg](https://www.resilientiq.com/hs-fs/hubfs/Blog_Images/Resilient-Advanced-Network-Solutions%204.jpg?width=1920&name=Resilient-Advanced-Network-Solutions%204.jpg "Resilient-Advanced-Network-Solutions 4.jpg")

# Networking Intelligence

May 24, 2017

# 5-Point Strategy for Securing Critical Infrastructure

![authorIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/authorIcon.png) By [Resilient Intelligent Networks](https://www.resilientiq.com/blog/author/resilient-intelligent-networks) ![topicIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/topicIcon.png) [security fabric](https://www.resilientiq.com/blog/topic/security-fabric), [network threats](https://www.resilientiq.com/blog/topic/network-threats), [oil and gas industry](https://www.resilientiq.com/blog/topic/oil-and-gas-industry), [critical infrastructure threats](https://www.resilientiq.com/blog/topic/critical-infrastructure-threats)

[![5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg](https://www.resilientiq.com/hubfs/Blog_Images/5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg) ](https://www.resilientiq.com/blog/5-point-strategy-for-securing-critical-infrastructure)

The need to protect critical infrastructure from the actions of those who seek to harm the nation came into sharp focus following the attacks of 9/11.

![5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg](https://www.resilientiq.com/hs-fs/hubfs/Blog_Images/5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg?width=640&name=5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg)

Since that time, the [US government has identified](https://www.dhs.gov/critical-infrastructure-sectors) 16 critical sectors whose, “assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.”

These are ominous words indeed. If your business operates in one of these sectors, no doubt you have spent a few sleepless nights considering the threats to your organization and the actions needed to counter them.

## The Internet of Things and Other New Threats

Unfortunately, with the rise of the Internet of Things and the increasingly complex [cyber supply chain](http://csrc.nist.gov/scrm/), the threats have only grown in number and complexity leading some [experts to ask](https://www.scmagazine.com/its-2017-is-anything-not-critical-infrastructure/article/638450/), “Is anything not critical infrastructure?”  Recently, lawmakers have pointed to [cyber attacks](http://thehill.com/policy/cybersecurity/326218-trump-pressed-to-secure-us-critical-infrastructure) on the Ukraine’s power grid and election-related hacks to stress the need for new, more effective countermeasures to protect critical infrastructure.

However, they concede government can only do so much. With an estimated 85% of critical infrastructure privately owned, there’s a clear need for government to [strengthen partnerships](http://thehill.com/policy/cybersecurity/326218-trump-pressed-to-secure-us-critical-infrastructure) with the private sector.

## Developing an Effective Public/Private Partnership

Among those leading efforts to [strengthen the public-private sector partnership](http://www.networkworld.com/article/3184935/security/fortinet-ciso-on-securing-critical-infrastructure-we-can-no-longer-bring-a-knife-to-a-gunfight.html) is Fortinet’s Chief Information Security Officer, Philip Quade. Mr. Quade, who has served as the NSA director’s special assistant for cyber and chief of the NSA Cyber Task Force, warns that the evolving nature of the threat means we can no longer “bring a knife to a gunfight.”

He also cautions that the problems are complex and there are no easy, quick fixes. What is needed is a sustained effort where the public and private sector adopt new ways of collaborating to identify specific risks to prevent and engineer out of critical systems.

In an [interview with Network World](http://www.networkworld.com/article/3184935/security/fortinet-ciso-on-securing-critical-infrastructure-we-can-no-longer-bring-a-knife-to-a-gunfight.html), Quade recommends a 5-step strategy:

1. Bring together leaders and stakeholders from the private and public sectors to share information and expertise, and take meaningful actions that address problems as they are identified through integration and influence, not control.
2. Shift focus from identifying bad actors to determining and addressing consequences to enable a more timely, effective response to unexpected threats.
3. Develop information sharing platforms to automate contextual exchanges across critical infrastructure entities and between IT and OT (operations technology) infrastructures with a focus on identifying and mitigating threats before they lead to system compromise.
4. Break down silos between OT, IT and physical security to leverage the strategies, technologies and expertise that span all.
5. Establish a common vision for securing critical infrastructure with governance constructs to provide oversight and assistance while encouraging participation and compliance.

**[Read also: Cybersecurity Challenges in the Oil & Gas Sector >>](https://www.resilientiq.com/blog/cybersecurity-challenges-in-oil-gas-sector)**

The threat to our critical infrastructure is real and a successful attack could be potentially devastating to business, government and the public. A Fortinet Platinum Partner, Resilient has the expertise and cybersecurity technology to help you join the effort to protect our nation’s critical infrastructure while ensuring that your organization thrives in an increasingly dangerous and interconnected world. [Learn more](https://www.resilientiq.com/).

 SHARE THIS STORY [**](https://www.facebook.com/sharer/sharer.php?u=https://www.resilientiq.com/blog/5-point-strategy-for-securing-critical-infrastructure&title=5-Point%20Strategy%20for%20Securing%20Critical%20Infrastructure&picture=https://cdn2.hubspot.net/hubfs/703198/Blog_Images/5-Point-Strategy-for-Securing-Critical-Infrastructure.jpg&description=The%20threat%20to%20critical%20infrastructure%20is%20real%20&%20a%20successful%20attack%20could%20be%20potentially%20devastating%20to%20business,%20government%20and%20the%20public.) | [**](https://twitter.com/intent/tweet?source=https://www.resilientiq.com/blog/5-point-strategy-for-securing-critical-infrastructure&text=5-Point%20Strategy%20for%20Securing%20Critical%20Infrastructure) | [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.resilientiq.com/blog/5-point-strategy-for-securing-critical-infrastructure&title=5-Point%20Strategy%20for%20Securing%20Critical%20Infrastructure&summary=The%20threat%20to%20critical%20infrastructure%20is%20real%20&%20a%20successful%20attack%20could%20be%20potentially%20devastating%20to%20business,%20government%20and%20the%20public.)

[NEXT POST **](https://www.resilientiq.com/blog/wannacry-wrap-up-5-cybersecurity-blunders-never-to-make-again)

### Search



### Recent Posts

### Posts by Topic

- [network security (29)](https://www.resilientiq.com/blog/topic/network-security)
- [employee it policy (15)](https://www.resilientiq.com/blog/topic/employee-it-policy)
- [security fabric (13)](https://www.resilientiq.com/blog/topic/security-fabric)
- [ransomware (11)](https://www.resilientiq.com/blog/topic/ransomware)
- [acceptable use policy (8)](https://www.resilientiq.com/blog/topic/acceptable-use-policy)
- [cyber threat analysis (7)](https://www.resilientiq.com/blog/topic/cyber-threat-analysis)
- [IT Security in Education (6)](https://www.resilientiq.com/blog/topic/it-security-in-education)
- [malware (6)](https://www.resilientiq.com/blog/topic/malware)
- [IoT Security (5)](https://www.resilientiq.com/blog/topic/iot-security)
- [Patient data security (5)](https://www.resilientiq.com/blog/topic/patient-data-security)
- [Protecting Student Data (5)](https://www.resilientiq.com/blog/topic/protecting-student-data)
- [network vulnerability (5)](https://www.resilientiq.com/blog/topic/network-vulnerability)
- [wireless networking solutions (5)](https://www.resilientiq.com/blog/topic/wireless-networking-solutions)
- [Cyber Threat Assessment (4)](https://www.resilientiq.com/blog/topic/cyber-threat-assessment)
- [Digital Privacy in Schools (4)](https://www.resilientiq.com/blog/topic/digital-privacy-in-schools)
- [protecting your it network (4)](https://www.resilientiq.com/blog/topic/protecting-your-it-network)
- [DDoS Attacks (3)](https://www.resilientiq.com/blog/topic/ddos-attacks)
- [IT Security in Schools (3)](https://www.resilientiq.com/blog/topic/it-security-in-schools)
- [Protecting Employee Privacy (3)](https://www.resilientiq.com/blog/topic/protecting-employee-privacy)
- [advanced persistent threats (3)](https://www.resilientiq.com/blog/topic/advanced-persistent-threats)
- [cloud security (3)](https://www.resilientiq.com/blog/topic/cloud-security)
- [healthcare cyberattacks (3)](https://www.resilientiq.com/blog/topic/healthcare-cyberattacks)
- [network threats (3)](https://www.resilientiq.com/blog/topic/network-threats)
- [phishing (3)](https://www.resilientiq.com/blog/topic/phishing)
- [secured network services (3)](https://www.resilientiq.com/blog/topic/secured-network-services)
- [securing the healthcare enterprise (3)](https://www.resilientiq.com/blog/topic/securing-the-healthcare-enterprise)
- [traffic shaping (3)](https://www.resilientiq.com/blog/topic/traffic-shaping)
- [Control network traffic (2)](https://www.resilientiq.com/blog/topic/control-network-traffic)
- [Intent-based Security (2)](https://www.resilientiq.com/blog/topic/intent-based-security)
- [K-12 Technology Security (2)](https://www.resilientiq.com/blog/topic/k-12-technology-security)
- [app performance (2)](https://www.resilientiq.com/blog/topic/app-performance)
- [bandwidth management (2)](https://www.resilientiq.com/blog/topic/bandwidth-management)
- [byod policy (2)](https://www.resilientiq.com/blog/topic/byod-policy)
- [cloud (2)](https://www.resilientiq.com/blog/topic/cloud)
- [critical infrastructure threats (2)](https://www.resilientiq.com/blog/topic/critical-infrastructure-threats)
- [cyber secure campus (2)](https://www.resilientiq.com/blog/topic/cyber-secure-campus)
- [cybersecurity strategy (2)](https://www.resilientiq.com/blog/topic/cybersecurity-strategy)
- [mobile device security (2)](https://www.resilientiq.com/blog/topic/mobile-device-security)
- [network optimization (2)](https://www.resilientiq.com/blog/topic/network-optimization)
- [network security in higher education (2)](https://www.resilientiq.com/blog/topic/network-security-in-higher-education)
- [network technology (2)](https://www.resilientiq.com/blog/topic/network-technology)
- [network visibility (2)](https://www.resilientiq.com/blog/topic/network-visibility)
- [oil and gas industry (2)](https://www.resilientiq.com/blog/topic/oil-and-gas-industry)
- [ssl encryption (2)](https://www.resilientiq.com/blog/topic/ssl-encryption)
- [threat intelligence (2)](https://www.resilientiq.com/blog/topic/threat-intelligence)
- [unified threat management (UTM) (2)](https://www.resilientiq.com/blog/topic/unified-threat-management-utm)
- [wan optimization (2)](https://www.resilientiq.com/blog/topic/wan-optimization)
- [wireless LAN access security (2)](https://www.resilientiq.com/blog/topic/wireless-lan-access-security)
- [wireless network best practices (2)](https://www.resilientiq.com/blog/topic/wireless-network-best-practices)
- [802.11ac wave 2 (1)](https://www.resilientiq.com/blog/topic/802-11ac-wave-2)
- [Endpoint Protection (1)](https://www.resilientiq.com/blog/topic/endpoint-protection)
- [Endpoint Security (1)](https://www.resilientiq.com/blog/topic/endpoint-security)
- [IT Security in Government (1)](https://www.resilientiq.com/blog/topic/it-security-in-government)
- [Internal Segmentation Firewalls (1)](https://www.resilientiq.com/blog/topic/internal-segmentation-firewalls)
- [Network Technology Problem Solving (1)](https://www.resilientiq.com/blog/topic/network-technology-problem-solving)
- [Point of sale attacks (1)](https://www.resilientiq.com/blog/topic/point-of-sale-attacks)
- [Public sector IT networks (1)](https://www.resilientiq.com/blog/topic/public-sector-it-networks)
- [Software-defined networking (1)](https://www.resilientiq.com/blog/topic/software-defined-networking)
- [Threat detection (1)](https://www.resilientiq.com/blog/topic/threat-detection)
- [application security (1)](https://www.resilientiq.com/blog/topic/application-security)
- [business critical applications (1)](https://www.resilientiq.com/blog/topic/business-critical-applications)
- [critical learning applications (1)](https://www.resilientiq.com/blog/topic/critical-learning-applications)
- [cybersecurity (1)](https://www.resilientiq.com/blog/topic/cybersecurity)
- [cybersecurity technology (1)](https://www.resilientiq.com/blog/topic/cybersecurity-technology)
- [data protection (1)](https://www.resilientiq.com/blog/topic/data-protection)
- [digital learning (1)](https://www.resilientiq.com/blog/topic/digital-learning)
- [healthcare data security (1)](https://www.resilientiq.com/blog/topic/healthcare-data-security)
- [healthcare mobile networks (1)](https://www.resilientiq.com/blog/topic/healthcare-mobile-networks)
- [high performance network security (1)](https://www.resilientiq.com/blog/topic/high-performance-network-security)
- [higher education (1)](https://www.resilientiq.com/blog/topic/higher-education)
- [hybrid clouds (1)](https://www.resilientiq.com/blog/topic/hybrid-clouds)
- [hyperconnected (1)](https://www.resilientiq.com/blog/topic/hyperconnected)
- [indicators of compromise (1)](https://www.resilientiq.com/blog/topic/indicators-of-compromise)
- [it industry news (1)](https://www.resilientiq.com/blog/topic/it-industry-news)
- [network infrastructure (1)](https://www.resilientiq.com/blog/topic/network-infrastructure)
- [network intrusion (1)](https://www.resilientiq.com/blog/topic/network-intrusion)
- [networking terminology (1)](https://www.resilientiq.com/blog/topic/networking-terminology)
- [next-generation firewal (1)](https://www.resilientiq.com/blog/topic/next-generation-firewal)
- [ngfw (1)](https://www.resilientiq.com/blog/topic/ngfw)
- [reinforce network technology (1)](https://www.resilientiq.com/blog/topic/reinforce-network-technology)
- [retail data security (1)](https://www.resilientiq.com/blog/topic/retail-data-security)
- [sandbox solution (1)](https://www.resilientiq.com/blog/topic/sandbox-solution)
- [sdn (1)](https://www.resilientiq.com/blog/topic/sdn)
- [security operations (1)](https://www.resilientiq.com/blog/topic/security-operations)
- [shadow IT risks (1)](https://www.resilientiq.com/blog/topic/shadow-it-risks)
- [ssl inspection (1)](https://www.resilientiq.com/blog/topic/ssl-inspection)
- [ssl security (1)](https://www.resilientiq.com/blog/topic/ssl-security)
- [university campus cybersecurity (1)](https://www.resilientiq.com/blog/topic/university-campus-cybersecurity)
- [zero-day attacks (1)](https://www.resilientiq.com/blog/topic/zero-day-attacks)

[see all](https://www.resilientiq.com/blog/5-point-strategy-for-securing-critical-infrastructure#)

### Subscribe to Blog

[![Resilient-Advanced-Networking-Solutions.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/Resilient-Advanced-Networking-Solutions.png?width=496&height=105&name=Resilient-Advanced-Networking-Solutions.png "Resilient-Advanced-Networking-Solutions.png")](http://resilientiq.com)

Contact

 2921 Country Club Road  
 Denton, Texas 76210  
 940-535-7500

#### Keep in Touch

### Subscribe to Our Blog

## [![social-1834007_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834007_960_720.png?width=40&name=social-1834007_960_720.png "social-1834007_960_720")](https://www.facebook.com/ResilientIntelligentNetworks)[![social-1834011_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834011_1280.png?width=40&name=social-1834011_1280.png "social-1834011_1280")](https://www.linkedin.com/company/resilient-intelligent-networks)[![social-1834013_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834013_1280.png?width=40&name=social-1834013_1280.png "social-1834013_1280")](https://twitter.com/resilientiq)[![social-1834014_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834014_960_720.png?width=40&name=social-1834014_960_720.png "social-1834014_960_720")](https://www.resilientiq.com/blog/rss.xml)[![](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834016_960_720.png?width=40&name=social-1834016_960_720.png "social-1834016_960_720.png")](https://www.youtube.com/channel/UCIuShF1pL6Ekv2JTOnXuz-Q)

Search the Resilient Blog on Google