Abstract

Aim of this report is to provide practical hints on how to evaluate the concept of Resilience in the domain of Critical Infrastructures (CI). The common understanding is that today best practices address cyber / physical protection of CI at the best they can, with traditional static and iterative solutions, trying to stop all possible known threats at the border of the single CI’s assets or CI’s full perimeter, ready to start with procedures of disaster recovery and business continuity in case of failure stopping external threats.