Risk Management Framework Features

The critical infrastructure risk management framework is designed to provide flexibility for use in all sectors, across different geographic regions and by various partners. It can be tailored to dissimilar operating environments and applies to all threats and hazards.

The framework supports a collaborative decisionmaking process to inform the selection of risk management actions.

Many organizations have risk management models that have proved effective and should be maintained, however, this framework provides an organizing construct for those models.

The risk management framework:
  • Is applicable to threats such as disasters, manmade safety hazards and terrorism.
  • Integrates and coordinates strategies, capabilities and governance to enable risk-informed decisionmaking.
  • Is tailored and applied on an asset, system, network, or functional basis, depending on the fundamental characteristics of the individual critical infrastructure sectors.