International Scientific Journals
of Scientific Technical Union of Mechanical Engineering "Industry 4.0"

Aim of this report is to provide practical hints on how to evaluate the concept of Resilience in the domain of Critical Infrastructures (CI). The common understanding is that today best practices address cyber / physical protection of CI at the best they can, with traditional static and iterative solutions, trying to stop all possible known threats at the border of the single CI’s assets or CI’s full perimeter, ready to start with procedures of disaster recovery and business continuity in case of failure stopping external threats.

Issues related to security are intertwined in all areas of the life of an organization. Many of them are considered and documented organizational and provided within the respective area/subsystem of the management system of the organization. For example, information security management is detailed and reliably described in the international standards. And this is natural, considering the importance of this type of security and the fact that information technology lie at the core of almost all organizations. In the meantime however, it is necessary to go a long way to reach the ultimate goal of improving security of the organizations by developing integrated management systems for business security. A Security Management System may be considered as that part of the overall management system, based manly of the quality management system, that provides the structure to enable identification of potential threats to an organization and which establishes, implements, operates, monitors, reviews and maintains all appropriate measures to provide assurance of the effective management of the associated security risks.