Loading module…
Loading module…
Module 1 of 6
The systems a society depends on to function — the power that runs everything, the water that sustains life, the finance that moves the economy, the transportation that carries people and goods — are not separate systems but one interdependent system, and this is the fact that most determines both their vulnerability and their defense. Each of these systems is understood by its own operators, defended by its own specialists, and mapped within its own boundaries; but the whole — the interdependent system in which the power grid feeds the water systems and the finance and the transportation, in which a failure in one cascades through the others — is seen by no one, owned by no one, mapped by no one. And this invisibility of the whole is the greatest danger, because the cascading failures that propagate through the unmapped interdependencies are the failures that turn a single disruption into a societal crisis, and they cannot be defended against by anyone who sees only their piece. This module maps the whole — the critical infrastructure as one interdependent system — because seeing the whole is the precondition for defending it, and the mapping of the whole is the foundation of the defense this course develops.
This course is about critical infrastructure vulnerabilities, and its purpose is defensive: understanding the vulnerabilities of the critical infrastructure in order to defend it, protect it, and build its resilience against the threats that would disrupt it. The course examines the vulnerabilities not to enable their exploitation but to enable their defense — understanding what makes the infrastructure vulnerable so that the vulnerabilities can be addressed, the infrastructure hardened, and the resilience built. The defensive orientation is the course's fundamental commitment, and this module establishes the systems map that the defense requires, understanding the critical infrastructure as the interdependent system that must be defended as a whole.
The module's organizing insight is that the critical infrastructure is one interdependent system, and the interdependencies — invisible to the operators who see only their own systems — are both the greatest vulnerability and the key to the defense. The interdependencies are the greatest vulnerability because they enable the cascading failures that propagate through the interdependent system, turning a single disruption into a societal crisis; and they are the key to the defense because defending the interdependent system requires seeing and addressing the interdependencies that the piece-by-piece defense misses. Seeing the interdependencies — mapping the whole interdependent system — is thus the foundation of both understanding the vulnerability (the cascading failures the interdependencies enable) and building the defense (addressing the interdependencies the piece-by-piece defense misses). This insight — that the interdependencies are both the greatest vulnerability and the key to the defense — is the module's core, framing the systems map as the foundation of understanding and defending the interdependent critical infrastructure.
Begin with the fundamental fact — that the critical infrastructure is one interdependent system — because it is the fact that most determines the vulnerability and the defense. The critical infrastructure systems are not separate but interdependent, forming one system whose interdependence is the central fact.
The critical infrastructure comprises the systems a society depends on to function, which are many but interdependent. The critical infrastructure comprises many systems — the energy systems (the power grid, the fuel supply), the water systems (the supply and sanitation), the financial systems (the banking and payments), the transportation systems (the movement of people and goods), the communications systems (the networks that connect), and the others a society depends on. These are many systems, but they are interdependent — each depending on the others — forming one interdependent system rather than a set of separate systems. Understanding this is understanding the critical infrastructure as many interdependent systems forming one system — the many systems interdependent, forming the one interdependent system — which is the fundamental fact, the critical infrastructure being one interdependent system of the many systems a society depends on.
The systems depend on each other, which makes them one interdependent system. The critical infrastructure systems depend on each other — the water systems depending on the power (to run the pumps and treatment), the financial systems depending on the power and communications (to run the transactions), the transportation depending on the power and fuel, the communications depending on the power, and each system depending on others in the web of interdependence. This mutual dependence makes them one interdependent system — each system depending on others, the systems interdependent, forming the one system of interdependent systems. Understanding this is understanding that the systems depend on each other — the mutual dependence making them one interdependent system — which is the central fact of the interdependence, the systems depending on each other in the web of interdependence that makes them one system. The mutual dependence is the substance of the interdependence, the systems depending on each other in the web that forms the one interdependent system.
The interdependence means a failure in one system propagates to the others, which is the central vulnerability. Because the systems depend on each other, a failure in one system propagates to the others — the power failure propagating to the water (the pumps and treatment failing without power), the finance (the transactions failing without power and communications), the transportation, and the systems that depend on the failed system. This propagation — the failure in one system cascading to the dependent systems — is the central vulnerability of the interdependent system, the failure propagating through the interdependence to the dependent systems. Understanding this is understanding that the interdependence means a failure propagates — the failure in one system cascading to the dependent systems — which is the central vulnerability, the cascading failure that propagates through the interdependence. The cascading failure is the central vulnerability of the interdependent system, the failure in one system propagating through the interdependence to the dependent systems, turning a single failure into a cascade.
The interdependence is the central fact for both the vulnerability and the defense, which the systems map must capture. The interdependence — the systems depending on each other, the failures propagating through the interdependence — is the central fact for both the vulnerability (the cascading failures the interdependence enables) and the defense (defending the interdependent system requires addressing the interdependence), which the systems map must capture. The systems map must capture the interdependence — the systems and their dependencies, the propagation paths of the cascades — because the interdependence is the central fact that the vulnerability and the defense turn on, and the systems map that captures it is the foundation of understanding the vulnerability and building the defense. Understanding this is understanding that the interdependence is the central fact for both the vulnerability and the defense — which the systems map must capture — which is why the systems map is the foundation, capturing the interdependence that the vulnerability and defense turn on. The systems map of the interdependent critical infrastructure — capturing the systems and their interdependence — is thus the foundation of the course, the map of the interdependent system that the vulnerability and the defense turn on.
Key Insight: The critical infrastructure is one interdependent system, not a set of separate systems — the many systems a society depends on (energy, water, finance, transportation, communications) depending on each other in a web of interdependence that makes them one system. The water systems depend on the power, the financial systems on the power and communications, the transportation on the power and fuel — each system depending on others. This interdependence means a failure in one system propagates to the others (the power failure cascading to the water, finance, and transportation that depend on it), which is the central vulnerability — the cascading failure. And the interdependence is the central fact for both the vulnerability (the cascades it enables) and the defense (which must address it), which the systems map must capture — making the map of the interdependent system the foundation of understanding and defending it.
The greatest danger to the critical infrastructure is the invisibility of the whole — the interdependent system that no one sees — and this section develops that invisibility, because understanding why the whole is invisible is understanding the greatest danger and the reason the systems map is so necessary. The whole is invisible because each operator sees only their piece, no one owns the whole, and no one maps the interdependencies.
Each operator sees only their own system, not the interdependent whole. Each critical infrastructure system is operated by its own operators — the power operators, the water operators, the financial operators, the transportation operators — who see and understand their own system but not the interdependent whole: the power operator understanding the power grid but not the water and finance and transportation that depend on it, the water operator understanding the water systems but not the whole interdependent system. Each operator sees their piece, not the whole, so the interdependent whole is seen by no single operator, each seeing only their piece. Understanding this is understanding that each operator sees only their own system, not the whole — the operators seeing their pieces, not the interdependent whole — which is the first reason the whole is invisible, the operators seeing only their pieces and no one seeing the whole. The piece-by-piece view of the operators is the first source of the invisibility of the whole, each operator seeing only their piece.
No one owns the whole, so no one is responsible for the interdependent system. The critical infrastructure systems are owned by different owners — the different operators, companies, and agencies that own the different systems — and no one owns the whole interdependent system: the interdependencies between the systems owned by no one, the whole interdependent system without an owner. Because no one owns the whole, no one is responsible for the interdependent system — each owner responsible for their system, no one responsible for the interdependencies and the whole. Understanding this is understanding that no one owns the whole — no one responsible for the interdependent system — which is a second reason the whole is invisible, the whole without an owner or a responsible party, the interdependencies owned by no one. The ownership by pieces, with no one owning the whole, is a second source of the invisibility, the whole without an owner responsible for it.
No one maps the interdependencies, so the interdependent system is unmapped. Because each operator sees only their piece and no one owns the whole, no one maps the interdependencies — the dependencies between the systems, the propagation paths of the cascades, the interdependent structure of the whole — so the interdependent system is unmapped, the interdependencies unmapped and unseen. The unmapped interdependencies are the invisible structure of the whole — the dependencies and propagation paths unmapped, the interdependent structure unseen — so the whole is invisible, its interdependent structure unmapped. Understanding this is understanding that no one maps the interdependencies — the interdependent system unmapped — which is a third reason the whole is invisible, the interdependencies unmapped and the interdependent structure unseen. The unmapped interdependencies are the invisible structure of the whole, the interdependent system unmapped and unseen.
The invisibility of the whole is the greatest danger, because the cascading failures propagate through the unseen interdependencies. The invisibility of the whole — the interdependencies unseen, the whole unmapped — is the greatest danger, because the cascading failures propagate through the unseen interdependencies: the failure propagating through the interdependencies that no one sees or maps, the cascade spreading through the unmapped structure, the crisis emerging from the interdependencies that no one anticipated because no one saw them. The invisibility of the whole is thus the greatest danger, because the cascades propagate through the unseen interdependencies, and the unseen interdependencies cannot be defended (the piece-by-piece defense not seeing the interdependencies through which the cascades propagate). Understanding this is understanding that the invisibility of the whole is the greatest danger — the cascades propagating through the unseen interdependencies — which is why the invisibility is the greatest danger, the cascades propagating through the interdependencies that no one sees, defends, or anticipates. The invisibility of the whole is the greatest danger, and the systems map that makes the whole visible is the response to this danger, mapping the interdependencies so they can be seen, defended, and anticipated, which is the foundation of the defense the course develops.
Key Insight: The greatest danger to the critical infrastructure is the invisibility of the whole — the interdependent system that no one sees. Each operator sees only their own system (the power operator understanding the grid but not the water, finance, and transportation that depend on it), so the interdependent whole is seen by no single operator. No one owns the whole — the interdependencies owned by no one — so no one is responsible for the interdependent system. And no one maps the interdependencies, so the interdependent structure is unmapped and unseen. This invisibility is the greatest danger, because the cascading failures propagate through the unseen interdependencies — the cascade spreading through the unmapped structure, the crisis emerging from the interdependencies no one anticipated because no one saw them. The systems map that makes the whole visible is the response, mapping the interdependencies so they can be seen, defended, and anticipated.
The systems map's central task is mapping the interdependencies — the dependencies between the systems and the propagation paths of the cascades — and this section develops the mapping of the interdependencies, because it is the mapping that makes the whole visible and defensible. Understanding the mapping of the interdependencies is understanding how the whole is made visible.
Mapping the interdependencies maps the dependencies between the systems, showing which systems depend on which. Mapping the interdependencies begins with mapping the dependencies between the systems — showing which systems depend on which: the water depending on the power, the finance depending on the power and communications, the transportation depending on the power and fuel, and the whole web of dependencies between the systems. This mapping of the dependencies shows the interdependent structure — which systems depend on which, the web of dependencies — which is the foundation of the interdependency map. Understanding this is understanding that mapping the interdependencies maps the dependencies between the systems — showing which depend on which — which is the foundation of the map, showing the interdependent structure of the dependencies. The mapping of the dependencies is the foundation, showing the web of dependencies between the systems.
Mapping the interdependencies maps the propagation paths of the cascades, showing how a failure propagates. Mapping the interdependencies maps the propagation paths of the cascades — showing how a failure in one system propagates through the dependencies to the dependent systems: the power failure propagating to the water (through the water's dependence on power), the finance (through the finance's dependence on power and communications), and the transportation, tracing the propagation paths through the dependencies. This mapping of the propagation paths shows how the cascades propagate — the paths a failure takes through the interdependencies — which reveals the cascade vulnerability. Understanding this is understanding that mapping the interdependencies maps the propagation paths — showing how a failure propagates through the dependencies — which reveals the cascade vulnerability, the paths the cascades take through the interdependencies. The mapping of the propagation paths reveals the cascade vulnerability, showing how the failures propagate through the interdependencies.
Mapping the interdependencies reveals the critical dependencies and the cascade risks, which the defense must address. Mapping the interdependencies reveals the critical dependencies — the dependencies whose failure would cause the largest cascades (the systems many others depend on, whose failure cascades widely) — and the cascade risks — the risks of the largest cascades propagating through the critical dependencies. The critical dependencies (like the power, which many systems depend on) and the cascade risks (the risk of the power failure cascading widely) are revealed by the mapping, which shows the critical dependencies and the cascade risks the defense must address. Understanding this is understanding that mapping the interdependencies reveals the critical dependencies and the cascade risks — the dependencies whose failure cascades widely and the risks of the large cascades — which the defense must address, focusing on the critical dependencies and the cascade risks the mapping reveals. The mapping reveals the critical dependencies and the cascade risks, focusing the defense on the dependencies whose failure would cascade widely.
Mapping the interdependencies makes the whole visible and defensible, which is the purpose of the mapping. Mapping the interdependencies — the dependencies, the propagation paths, the critical dependencies, the cascade risks — makes the whole visible (the interdependent structure mapped and seen) and defensible (the interdependencies that can be defended once seen): the whole made visible by the mapping, the interdependencies made defensible by being seen and mapped. The purpose of the mapping is thus to make the whole visible and defensible — mapping the interdependencies so the whole can be seen and the interdependencies defended — which is the response to the invisibility of the whole, making the whole visible and defensible by mapping the interdependencies. Understanding this is understanding that mapping the interdependencies makes the whole visible and defensible — the purpose of the mapping — which is the response to the invisibility, making the whole visible and defensible by mapping the interdependencies that were invisible. The mapping of the interdependencies is thus the foundation of the defense, making the whole visible and defensible by mapping the interdependencies that the piece-by-piece view leaves invisible, which is the foundation of defending the interdependent critical infrastructure as a whole.
Key Insight: The systems map's central task is mapping the interdependencies, which makes the whole visible and defensible. It maps the dependencies between the systems (which systems depend on which — the water on the power, the finance on the power and communications), showing the interdependent structure. It maps the propagation paths of the cascades (how a failure propagates through the dependencies — the power failure cascading to the water, finance, and transportation), revealing the cascade vulnerability. It reveals the critical dependencies (the systems many others depend on, whose failure cascades widely, like the power) and the cascade risks (the risks of the largest cascades), which the defense must address. And it makes the whole visible and defensible — the response to the invisibility — mapping the interdependencies so the whole can be seen and the interdependencies defended, which is the foundation of defending the interdependent critical infrastructure as a whole.
Beyond the interdependencies, the critical infrastructure has sources of vulnerability that the systems map must capture, and this section develops those sources — the digital dependence, the aging infrastructure, the concentration, and the complexity — because understanding the sources of vulnerability is understanding what makes the infrastructure vulnerable, which the defense must address. Understanding the sources is understanding the vulnerabilities the defense addresses.
The digital dependence is a source of vulnerability, because the digital control systems expose the infrastructure to the cyber threat. The critical infrastructure increasingly depends on digital control systems (as the cyberwarfare course developed) — the industrial control systems, the digital systems that control the physical infrastructure — which expose the infrastructure to the cyber threat: the digital control systems reachable through the digital layer, the infrastructure exposed to the cyber attack through the digital control systems. The digital dependence is thus a source of vulnerability, exposing the infrastructure to the cyber threat through the digital control systems. Understanding this is understanding the digital dependence as a source of vulnerability — the digital control systems exposing the infrastructure to the cyber threat — which the defense must address, securing the digital control systems that expose the infrastructure. This connects to the cyberwarfare course's critical-infrastructure module: the digital dependence exposes the infrastructure to the cyber threat, which the defense must address by securing the digital control systems, and it is a major source of the infrastructure's vulnerability.
The aging infrastructure is a source of vulnerability, because the aging systems are fragile and hard to secure. Much of the critical infrastructure is aging — the aging systems built decades ago, deteriorating with age, hard to update and secure — which is a source of vulnerability: the aging systems fragile (vulnerable to failure through age and deterioration), and hard to secure (built before the modern threats, hard to update with modern security). The aging infrastructure is thus a source of vulnerability, the aging systems fragile and hard to secure. Understanding this is understanding the aging infrastructure as a source of vulnerability — the aging systems fragile and hard to secure — which the defense must address, maintaining and securing the aging systems or replacing them. The aging infrastructure is a significant source of vulnerability, the aging systems fragile and hard to secure, which the defense must address through the maintenance, security, and replacement of the aging systems.
The concentration is a source of vulnerability, because the concentration creates single points of failure. The critical infrastructure often has concentration — the concentration of the infrastructure in single points (the key facilities, the critical nodes, the central systems) on which much depends — which is a source of vulnerability, because the concentration creates single points of failure: the single point whose failure disrupts much (the critical node many depend on, the key facility whose failure cascades). The concentration is thus a source of vulnerability, creating the single points of failure whose failure disrupts much. Understanding this is understanding the concentration as a source of vulnerability — creating the single points of failure — which the defense must address, protecting the single points of failure or reducing the concentration through the distribution and redundancy. The concentration is a source of vulnerability, creating the single points of failure that the defense must protect or reduce through the distribution and redundancy that eliminate the single points of failure.
The complexity is a source of vulnerability, because the complex systems fail in complex, unanticipated ways. The critical infrastructure is complex — the complex systems with the complex interactions, the complex interdependencies — which is a source of vulnerability, because the complex systems fail in complex, unanticipated ways: the complex interactions producing the unanticipated failures, the complexity making the failures hard to anticipate and prevent. The complexity is thus a source of vulnerability, the complex systems failing in complex, unanticipated ways. Understanding this is understanding the complexity as a source of vulnerability — the complex systems failing in complex, unanticipated ways — which the defense must address, managing the complexity and building the resilience against the unanticipated failures the complexity produces. The complexity is a source of vulnerability, the complex systems failing unanticipatedly, which the defense must address through the management of the complexity and the resilience against the unanticipated failures. Together, these sources — the digital dependence, the aging infrastructure, the concentration, and the complexity — along with the interdependencies, are the sources of the critical infrastructure's vulnerability, and understanding them is understanding what makes the infrastructure vulnerable, which the defense must address by securing the digital dependence, maintaining the aging infrastructure, reducing the concentration, managing the complexity, and addressing the interdependencies.
Key Insight: Beyond the interdependencies, the critical infrastructure has sources of vulnerability the systems map must capture. The digital dependence exposes the infrastructure to the cyber threat through the digital control systems (connecting to the cyberwarfare course), which the defense must secure. The aging infrastructure is fragile and hard to secure — the aging systems deteriorating with age and built before the modern threats — which the defense must maintain, secure, or replace. The concentration creates single points of failure — the critical nodes and key facilities whose failure disrupts much — which the defense must protect or reduce through distribution and redundancy. And the complexity causes the complex systems to fail in complex, unanticipated ways, which the defense must manage and build resilience against. Together with the interdependencies, these sources of vulnerability are what the defense must address.
The critical infrastructure faces threats that exploit its vulnerabilities, and understanding the threats — the cyber threats, the physical threats, the natural threats, and the systemic threats — is understanding what the defense must defend against. This section develops the threats from the defensive perspective, because understanding the threats is understanding what the defense addresses.
The cyber threats exploit the digital dependence, threatening the infrastructure through the digital control systems. The cyber threats — the state actors, the criminal actors, the other cyber adversaries (as the cyberwarfare course developed) — exploit the digital dependence, threatening the infrastructure through the digital control systems: the cyber attack on the digital control systems, disrupting or damaging the physical infrastructure through the compromised control (the cyber-physical bridge the cyberwarfare course developed). The cyber threats are a major threat, exploiting the digital dependence to threaten the infrastructure through the digital control systems. Understanding this is understanding the cyber threats as a major threat — exploiting the digital dependence to threaten the infrastructure through the digital control systems — which the defense must defend against, securing the digital control systems against the cyber threats. The cyber threats are a major and growing threat, exploiting the digital dependence, which the defense must defend against by securing the digital control systems.
The physical threats threaten the infrastructure directly, through the physical attack or damage. The physical threats — the physical attack on the infrastructure, the physical damage to the facilities and systems — threaten the infrastructure directly: the physical attack on the key facilities, the physical damage to the critical nodes, the physical disruption of the infrastructure. The physical threats threaten the infrastructure directly, through the physical attack or damage. Understanding this is understanding the physical threats as a threat — threatening the infrastructure directly through the physical attack or damage — which the defense must defend against, protecting the infrastructure physically against the physical threats. The physical threats are a threat, threatening the infrastructure directly, which the defense must defend against through the physical protection of the infrastructure. This course, in its defensive orientation, addresses the physical threats at the level of understanding the physical vulnerabilities to defend them — the physical protection of the infrastructure — not the conduct of the physical attacks.
The natural threats threaten the infrastructure through the natural hazards, which exploit the fragility. The natural threats — the natural hazards (the storms, the earthquakes, the floods, the extreme weather) — threaten the infrastructure through the natural hazards that exploit the fragility: the natural hazard disrupting the fragile infrastructure, the aging and concentrated infrastructure vulnerable to the natural hazards. The natural threats are a threat, exploiting the fragility through the natural hazards. Understanding this is understanding the natural threats as a threat — threatening the infrastructure through the natural hazards that exploit the fragility — which the defense must defend against, hardening the infrastructure against the natural hazards and building the resilience against them. The natural threats are a threat, exploiting the fragility through the natural hazards, which the defense must defend against through the hardening and resilience against the natural hazards. The natural threats are important because they are frequent and inevitable — the natural hazards recurring — and the infrastructure must be resilient against them.
The systemic threats threaten the infrastructure through the cascading failures, which exploit the interdependencies. The systemic threats — the threats of the cascading failures that propagate through the interdependencies (as the interdependency mapping revealed) — threaten the infrastructure through the cascades: a failure in one system (from any cause — cyber, physical, natural) cascading through the interdependencies to the dependent systems, the cascade turning the single failure into the systemic crisis. The systemic threats are the threats of the cascades, exploiting the interdependencies to turn the single failures into the systemic crises. Understanding this is understanding the systemic threats as a threat — threatening the infrastructure through the cascading failures that exploit the interdependencies — which the defense must defend against, addressing the interdependencies and preventing the cascades. The systemic threats are the most distinctive threat to the interdependent infrastructure, the cascades that propagate through the interdependencies, which the defense must defend against by addressing the interdependencies and preventing the cascades. Together, these threats — the cyber, the physical, the natural, and the systemic — are the threats to the critical infrastructure, and understanding them is understanding what the defense must defend against, securing against the cyber threats, protecting against the physical threats, hardening against the natural threats, and preventing the cascades of the systemic threats.
Key Insight: The critical infrastructure faces threats that exploit its vulnerabilities. The cyber threats exploit the digital dependence, threatening the infrastructure through the digital control systems (the cyber-physical bridge), which the defense must secure. The physical threats threaten the infrastructure directly through the physical attack or damage, which the defense must protect against physically (addressed here at the level of understanding the vulnerabilities to defend them, not the conduct of attacks). The natural threats exploit the fragility through the natural hazards (storms, earthquakes, floods) — frequent and inevitable — which the defense must harden and build resilience against. And the systemic threats — the most distinctive threat to the interdependent infrastructure — threaten through the cascading failures that exploit the interdependencies, turning a single failure from any cause into a systemic crisis, which the defense must prevent by addressing the interdependencies.
This final section establishes the systems map as the foundation of the defense, showing how the map of the interdependent system and its vulnerabilities is the foundation of the defense the course develops. Understanding the systems map as the foundation is understanding the course's structure and its approach.
The systems map is the foundation of the defense, because defending the interdependent system requires seeing it. The systems map — making the interdependent whole visible, mapping the interdependencies and the vulnerabilities — is the foundation of the defense, because defending the interdependent system requires seeing it: the defense of the interdependent system requiring the visibility of the whole that the systems map provides, the defense of the interdependencies requiring the mapping of the interdependencies that the systems map provides. The systems map is thus the foundation of the defense, providing the visibility of the whole that the defense requires. Understanding this is understanding the systems map as the foundation of the defense — providing the visibility of the whole that the defense requires — which is the foundation, the systems map making the whole visible so the defense can defend it. The systems map is the foundation, making the whole visible for the defense.
The systems map reveals the vulnerabilities the defense must address, focusing the defense on them. The systems map — revealing the interdependencies, the critical dependencies, the cascade risks, and the sources of vulnerability (the digital dependence, aging, concentration, complexity) — reveals the vulnerabilities the defense must address, focusing the defense on them: the defense focused on the critical dependencies and cascade risks the map reveals, the sources of vulnerability the map identifies. The systems map thus reveals the vulnerabilities and focuses the defense on them. Understanding this is understanding that the systems map reveals the vulnerabilities and focuses the defense — the defense focused on the vulnerabilities the map reveals — which is how the systems map guides the defense, revealing the vulnerabilities and focusing the defense on them. The systems map guides the defense, revealing the vulnerabilities the defense addresses.
The systems map organizes the course, which examines the vulnerabilities of the key systems and develops the defense architecture. The systems map organizes the course — the following modules examining the vulnerabilities of the key systems (the power grid in Module 2, the water and sanitation in Module 3, the financial system in Module 4, the transportation and logistics in Module 5) and developing the defense architecture (Module 6) — building on the systems map that reveals the interdependent whole and its vulnerabilities. The systems map is the foundation the course builds on, examining the key systems' vulnerabilities and developing the defense architecture within the map of the interdependent whole. Understanding this is understanding that the systems map organizes the course — the following modules examining the key systems and developing the defense architecture — which is the course's structure, building on the systems map that reveals the interdependent whole. The systems map organizes the course, the foundation the following modules build on.
The systems map maintains the defensive orientation, and it connects to the broader Academy's systems thinking. The systems map — understanding the interdependent critical infrastructure and its vulnerabilities to defend it — maintains the course's defensive orientation (understanding the vulnerabilities to defend them, not to exploit them) and connects to the broader Academy's systems thinking (the systems approach to understanding and defending the interdependent system). The systems map is thus the defensive, systems-thinking foundation of the course — understanding the interdependent system to defend it, applying the Academy's systems thinking to the critical infrastructure. Understanding this is understanding the systems map as the defensive, systems-thinking foundation — understanding the interdependent system to defend it, applying the systems thinking — which maintains the defensive orientation and connects to the broader Academy. The systems map is the foundation of the defense of the critical infrastructure — making the interdependent whole visible, revealing the vulnerabilities, organizing the course, maintaining the defensive orientation, and connecting to the systems thinking — which is the foundation of understanding and defending the critical infrastructure as the interdependent system it is, in service of the defense of the systems a society depends on to function against the threats that would disrupt them through the vulnerabilities the systems map reveals.
Key Insight: The systems map is the foundation of the defense, because defending the interdependent system requires seeing it — the visibility of the whole that the map provides, and the mapping of the interdependencies that the defense of them requires. It reveals the vulnerabilities the defense must address (the interdependencies, the critical dependencies, the cascade risks, the sources of vulnerability), focusing the defense on them. It organizes the course — the following modules examining the vulnerabilities of the key systems (power, water, finance, transportation) and developing the defense architecture, building on the map of the interdependent whole. And it maintains the defensive orientation (understanding the vulnerabilities to defend them, not exploit them) and connects to the broader Academy's systems thinking. The systems map is the foundation of understanding and defending the critical infrastructure as the interdependent system it is.
This module mapped the critical infrastructure as one interdependent system — the foundation of the defense the course develops. The core moves are the critical infrastructure as one interdependent system (the systems depending on each other, the failures propagating through the interdependence), the invisibility of the whole (the greatest danger — the interdependencies unseen because each operator sees only their piece, no one owns the whole, and no one maps the interdependencies), mapping the interdependencies (the dependencies, the propagation paths, the critical dependencies, and the cascade risks that make the whole visible and defensible), the sources of vulnerability (the digital dependence, the aging infrastructure, the concentration, and the complexity, along with the interdependencies), and the threats (the cyber, physical, natural, and systemic threats the defense must defend against). The through-line is that the interdependencies are both the greatest vulnerability (the cascades they enable) and the key to the defense (which must address them), and that the systems map that makes the whole visible is the foundation of understanding and defending the interdependent critical infrastructure.
The following modules examine the vulnerabilities of the key systems and develop the defense architecture. Power Grid Vulnerabilities comes next, examining the vulnerabilities of the power grid — the critical dependency that many systems depend on, whose failure cascades widely — from the defensive perspective of understanding the vulnerabilities to defend them. Water & Sanitation Attack Surfaces, Financial System Threats, and Transportation & Logistics Security examine the vulnerabilities of the water, financial, and transportation systems — the key systems the society depends on. And Defense Architecture for Critical Systems develops the defense architecture that defends the interdependent system, building on the systems map and the understanding of the key systems' vulnerabilities.
Throughout, the systems map established here is the foundation — making the interdependent whole visible, revealing the vulnerabilities, and organizing the course — and the defensive orientation is maintained, understanding the vulnerabilities to defend them, not to exploit them. The defense of the critical infrastructure — understanding the interdependent system and its vulnerabilities to defend it, protect it, and build its resilience — is the purpose the course serves, and the systems map is the foundation, making the interdependent whole visible so it can be defended as a whole. The defense of the systems a society depends on to function — against the threats that would disrupt them through the vulnerabilities the systems map reveals — is one of the most important defenses, and the systems map that makes the interdependent whole visible is its foundation, the map of the whole that the defense of the whole requires.