Guest Columnist: Strengthening critical infrastructure security in the face of global instability

Why situational awareness is essential amid global instability

By Andreas Beerbaum

Security is a top priority for any organisation responsible for safeguarding critical infrastructure. However, recent events have highlighted the fragility of the global energy supply chain and the need for change.

When tankers cannot safely navigate the Strait of Hormuz, fuel prices rise and public anxiety grows. This often results in long lines at the fuel pump and fears of shortages quickly becoming a self-fulfilling prophecy.

The reality is that critical infrastructure will always be a target because those seeking to disrupt, cause harm or force change — militarily, economically, politically or socially — understand both its physical and psychological impact.

Regulating for resilience

While headlines focus on political debates over who should keep shipping lanes open, critical infrastructure organisations and governments are moving forward with new physical and cyber safeguards to protect sites closer to home.

Weeks before recent events in the Middle East, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released its 2025 review outlining major actions taken to strengthen national cyber and physical defences. Meanwhile, in Europe, the Critical Entities Resilience (CER) Directive will take effect across the EU in July, with member states such as Germany advancing early through its KRITIS framework to establish a model for CER compliance.

These initiatives extend to energy supplies, from power stations (gas, electricity and nuclear), refineries and pipelines, substations, water treatment facilities, data centres and food production. And while increased investment in renewable energy may reduce reliance on overseas supply, wind and solar farms remain potential targets as well. Fortunately, the likelihood of missile strikes on critical infrastructure is low in many regions. But the risks of trespassing, espionage, sabotage, terrorism and protest activity are far higher.

Protection and detection

Security levels vary widely across critical infrastructure. A large power station may employ live-monitored CCTV, video analytics, alarms, sensors, access control, fencing and other heightened defences. In contrast, a rural electrical substation may rely on a single unmonitored camera, a perimeter fence and a basic alarm.