Critical Infrastructure and Internal Controls

Critical refers to infrastructure that provides an essential support for economic and social well-being, for public safety and for the functioning of key government responsibilities. According to Resolution of the National Security Strategy of the Republic of Slovenia various sources of threat are directed towards critical infrastructure. An operational infrastructure ensures the implementation of key state and society function. In this respect, the treat to critical infrastructure may also influence the national security. Risk is the possibility of an event occurring that will have an impact on the achievement of objectives. When we discuses risks, we usually talk about negative impacts, which can cause that we can´t be able to achieve our objectives. Risk management is an act or process of controlling risks. All of the government programmes studied adopt a risk management approach to critical infrastructure protection. Risk management helps governments to identify key security assets, assess risks and establishes strategies and priorities for mitigating these risks. We can almost never eliminate the risks completely. Risks can be reduced to an acceptable level. The acceptable risk is a set of risks that the process is facing is sufficiently small or unimportant for the critical infrastructure to coexist with it and not try to further reduce it. Management or those who are responsible for critical infrastructure will want to reduce risk to an acceptable level by applying controls and other measures.