I was researching cyberattacks on critical infrastructure, when I stumbled across an article about a cyberattack in Ireland in December last year that led to a two-day water supply outage, affecting 180 people. This incident highlights the vulnerability of our critical infrastructure to cyber threats and got me thinking… imagine the repercussions if such an event occurred on a larger scale. The potential disruption could be catastrophic, impacting thousands or even millions of people.

Personal resilience through stockpiling

In the UK, the recommendation is to stockpile food and water for just three days, with a minimum of 2-3 litres water per person per day. For optimal comfort and hygiene, 10 litres per day is suggested, as water is essential not just for drinking but also for cooking and sanitation. Conversely, in Germany, the Federal Office of Civil Protection and Disaster Assistance (BBK) advises citizens to stockpile food and water for at least 10 days, with a recommended 2 litres of water per person per day. This guidance ensures that individuals have sufficient resources to survive while the government works to restore services.

The discrepancy between the UK’s 3-day and Germany’s 10-day recommendations raises questions. Why the difference? One possible explanation is varying assessments of infrastructure resilience and response capabilities. Germany might anticipate longer restoration times, thus advising more extended preparation periods. Alternatively, the UK might not want to repel people with the daunting prospect of storing 200 litres of water and so much food, which could be seen as impractical or overwhelming. Additionally, cultural and societal factors could play a role, influencing perceptions of risk and preparedness. It’s also possible that each country’s emergency management agencies have different methodologies for risk assessment and resource allocation. However, without definitive information from these agencies, it’s all just guesswork. Regardless of the reason, the important thing is to heed the advice provided and take proactive steps to ensure personal and community resilience in the face of potential disruptions.

Despite these guidelines, I don’t personally know many people who are adequately prepared, neither in the UK nor in Germany, and not even for three days. When I started my studies, we were asked how many of us students had emergency stock at home. Almost none of us did. After this initial question, we extended the inquiry to our friends and family, almost none of them had an emergency stock either. It’s a common challenge, especially considering that many households lack the space to store significant quantities of supplies. While most might have enough food to last for a few days, they may lack the means to cook it in the event of a power outage. This raises concerns about the practicality of the recommendations and underscores the need for realistic and accessible preparedness measures that account for various constraints faced by individuals and families. We spent numerous courses learning about the effects of different hazards and realising how possible it actually is for a widespread power outage to occur. Such an event could lead to numerous inconveniences, such as no water, no possibility to cook, shower, or flush the toilet. By the end of the course, the number of students who were prepared had risen significantly, but still not to 100% of us were. This was before cyber attacks were as prominent as they are nowadays. Today, attacks on critical infrastructure are seen more and more often, causing significant disruptions and highlighting the increasing risk. And from the people I’ve stayed in contact with over the years I know that their preparedness has increased with the hazards present.

Cyberattacks on critical infrastructure can have a wide range of impacts. They can disrupt essential services like water and power supply, communication networks, and transportation systems. This can lead to severe consequences such as loss of access to clean water, food spoilage due to lack of refrigeration, inability to heat homes, and failure of emergency services. The economic impact can be devastating, with businesses losing revenue and individuals facing unexpected costs. Moreover, the psychological impact on the population can be profound, causing stress, anxiety, and a sense of insecurity.

This issue extends beyond individual households

Companies must also consider their continuity plans. Businesses may find themselves needing to stockpile even more resources to ensure that their operations can continue, even if at a reduced rate. This is often referred to as the minimum business continuity objective, ensuring that essential functions can be maintained during times of disruption. Alternatively, companies may need to stockpile supplies to bridge the gap until normal operations can be restored. This could include not only food and water but also critical supplies needed for production or service delivery. It’s essential for businesses to have robust contingency plans in place to address these challenges and ensure their resilience in the face of unforeseen disruptions. Beyond determining how much to stockpile, businesses need to address the potential mobility of their workforce. In the event of a prolonged outage, employees might temporarily relocate to unaffected areas, potentially too far to commute to work. This scenario necessitates robust remote work capabilities and contingency plans to maintain operations despite a dispersed workforce. Companies should also invest in cybersecurity measures to protect their systems from attacks and ensure they have backup solutions for critical functions.

The recent cyberattack in Ireland serves as a stark reminder that preparation is not just an individual responsibility but a collective one. Governments, businesses, and individuals all have crucial roles in building resilience. Ensuring that everyone has adequate supplies can buy precious time for authorities to respond effectively and restore normality. By preparing together, we can mitigate the impacts of unforeseen disruptions and safeguard our communities.

Preparedness is paramount. I am prepared, are you?

 

Image by freepik