Critical Infrastructure Protection — Definition

Definition

Critical information infrastructure comprises computer resources whose incapacitation or destruction would have a debilitating impact on specified essential interests, including national security, the economy, public health or safety.

The significance lies in the consequence of failure, not simply the popularity or size of a website. Protection therefore requires understanding how digital systems support essential physical and institutional services.

In India, NCIIPC's role under section 70A of the Information Technology Act is distinct from CERT-In's national incident-response role under section 70B. Resilience combines prevention with the ability to sustain or restore essential functions.