Security certification for critical information infrastructures: The Italian certification body approach

Luisa Franchina, Laura Gratta and Marco Carbonelli

Journal of Business Continuity & Emergency Planning, 2007, vol. 1, issue 3, 302-311

Abstract: Critical national infrastructures (CNIs) — defined as any public or private infrastructure whose operation is essential for a country’s security and functioning, including such fundamental sectors as healthcare, economy, energy, transport, communication systems, law enforcement, defence and, in general, public administration — can be affected by a variety of events that can jeopardise their efficiency both directly and indirectly. CNIs increasingly rely on critical information infrastructures (CIIs), such as telecommunications. These networks must guarantee operational viability when critical events occur, as well as under normal working conditions. In some circumstances, critical events can affect not only the CNIs, but also their telecommunication infrastructures. Such failures are not necessarily caused by external events. To guarantee their correct and continuous operation, security aspects of CIIs must therefore be the focus of particular care. Guarantees on the effectiveness and correctness of the security measures deployed in the CII can be obtained through certification. This paper analyses the role of system/product security certification in this context. In particular, the paper describes the certification approach recommended by the Italian national certification body (Organismo di Certificazione della Sicurezza Informatica) to achieve the maximum benefit from the process, in terms of both efficiency and security.

Keywords: ICT security; system/product certification; ISO IEC15408; critical infrastructure protection (search for similar items in EconPapers)
JEL-codes: M1 M10 M12 (search for similar items in EconPapers)
Date: 2007
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/4409/download/ (application/pdf)
https://hstalks.com/article/4409/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:jbcep0:y:2007:v:1:i:3:p:302-311

Access Statistics for this article

More articles in Journal of Business Continuity & Emergency Planning from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().