Massimo Ferrari, Senior Risk Engineer Casualty

22nd May 2019 – CRO Assembly

CRO Assembly 2019 | Vulnerability of critical infrastructure

What are we going to talk about?

2

• Vulnerability of critical

infrastructure (Massimo)

• Critical infrastructure, Cyber and

worse (Eric)

• Round table – Open discussion

2CRO Assembly 2019 | Vulnerability of critical infrastructure

CRO Assembly 2019 | Vulnerability of critical infrastructure

Chemical Commercial facilities Communications Critical manufacturing Dams Defence industrial base

Emergency services Energy Financial services Food and agriculture Government facilitiesHealthcare and public

health

Information technologyNuclear reactors,

materials and wasteTransportation systems

Water and wastewater systems

3

How is a critical infrastructure defined ? Assets and systems essential for the functioning of a society and economyDepartment of Homeland Security defines 16 sectors

Department of Homeland Security - www.dhs.gov/cisa/critical-infrastructure-sectors

CRO Assembly 2019 | Vulnerability of critical infrastructure 4

Infrastructure vulnerable to age in a fast pace worldRating the US infrastructure system

Fatalities

Vehicle maintenance costs

Weight limitations

Road stoppages

Stress on other roads

Emergency maintenance

Degradation rateAmerican Society of Civil Engineers www.infrastructurereportcard.org

CRO Assembly 2019 | Vulnerability of critical infrastructure 5

Just thinking about roads – not bridges, dams, viaducts, water facilitiesIntegrated view

Fatalities

Vehicle maintenance costs

Weight limitations

Road stoppages

Stress on other roads

Emergency maintenance

Degradation rate

CRO Assembly 2019 | Vulnerability of critical infrastructure 6

Consequences - Failure to act2 trillion US$ of funding gap

www.infrastructurereportcard.org

2 trillion US$ of funding gap

CRO Assembly 2019 | Vulnerability of critical infrastructure 7

Changes surrounding conditions: slow and constant stress increaseTraffic, heavy traffic, maintenance ⇒ design not coping with the changes

CRO Assembly 2019 | Vulnerability of critical infrastructure 8

Changes surrounding conditions: disruptive eventsShale oil and oil sands ⇒ Oil by train

CRO Assembly 2019 | Vulnerability of critical infrastructure 9

Lac Mégantic Oil Train Disaster6th July, 2013

• 63 of 72 crude oil tank derailed

• 47 fatalities, 2’000 evacuated

• Large part of the village destroyed

• Environmental contamination from

the 38’000 bbl crude oil spilled

CRO Assembly 2019 | Vulnerability of critical infrastructure

Construction of infrastructure – Industry trendsEmerging risks

10

Mega projects

Time and cost pressure

New building materials

Aesthetics of engineering

Automation in design

Sensors and IoT

CRO Assembly 2019 | Vulnerability of critical infrastructure 11

Which are the critical infrastructure sectors most exposed to cyber risks?One possible answer

Chemical Commercial facilities Communications Critical manufacturing Dams Defence industrial base

Emergency services Energy Financial services Food and agriculture Government facilitiesHealthcare and public

health

Information technologyNuclear reactors,

materials and wasteTransportation systems

Water and wastewater systems

Department of Homeland Security - www.dhs.gov/cisa/critical-infrastructure-sectors

CRO Assembly 2019 | Vulnerability of critical infrastructure 12

CRO Assembly 2019 | Vulnerability of critical infrastructure

Legal notice

13

©<year> Swiss Re. All rights reserved. You are not permitted to create any modifications

or derivative works of this presentation or to use it for commercial or other public purposes

without the prior written permission of Swiss Re.

The information and opinions contained in the presentation are provided as at the date of

the presentation and are subject to change without notice. Although the information used

was taken from reliable sources, Swiss Re does not accept any responsibility for the accuracy

or comprehensiveness of the details given. All liability for the accuracy and completeness

thereof or for any damage or loss resulting from the use of the information contained in this

presentation is expressly excluded. Under no circumstances shall Swiss Re or its Group

companies be liable for any financial or consequential loss relating to this presentation.