C(I)IP task description and a proposal for a substitute of national C(I)IP policies

The development of critical infrastructures in the past 20 years brought ICT into nearly every component, increased the complexity enormously, and centralized service production for cost optimization. The overall security level and crisis preparedness has decreased at the same time. Counter measures in the form of C(I)IP plans are being discussed on political side and also from the technical side e.g. in the form of sector-specific cyber security and CERT efforts. However, in between these two ends C(I)IP middleware is missing. This paper proposes to approach the specification of this middleware through an extraordinary situation service level agreement (ES SLA) mechanism, which defines key performance indicators (KPI) and parameters for good C(I)IP practice. The ES SLA is intended as a step in solving problems such as missing national C(I)IP policy, missing CI(I)IP middleware specification, lack of motivation to approach the C(I)IP task and an incomplete C(I)IP view of stakeholders. Moreover, procedures for KPI definition and perspectives on how ES SLA could work are given.