Strategic Energy Security
Assess crude oil, gas, coal, electricity, renewables, batteries and critical-mineral dependencies and diversify excessive concentration.
Define where this capability matters and what must continue.
Record the relevant national, state, district or local geography; affected population; responsible authority and operator; critical function; upstream and downstream dependencies; maximum tolerable disruption; alternative route; and safe publication level.
Cyber, Critical Infrastructure & Strategic Reserves. Its effects may cross defence, governance, digital, energy, water, food, health, transport, industry, jobs, education and community resilience.
Start with consequence, exposure and service failure.
Assess crude oil, gas, coal, electricity, renewables, batteries and critical-mineral dependencies and diversify excessive concentration.
Essential systems are tightly coupled, so one failure can cause cascading disruption.
A reserve or backup that is not maintained and exercised may provide false assurance.
State what could fail, who or what is exposed, the plausible consequence, current control, evidence strength and unresolved uncertainty—without publishing sensitive operational detail.
Test technical, institutional, supply, workforce and lifecycle causes.
Hidden single-source dependencies
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Incomplete asset and supplier registers
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Weak lifecycle maintenance
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Recovery plans not tested under realistic constraints
Compare audits, exercises, service history, maintenance, staffing, budgets, dependencies and credible alternatives before confirming causation.
Use evidence appropriate to the claim and its security class.
| Claim | Minimum evidence | Publication rule |
|---|---|---|
| Capacity exists | Inventory, trained people, maintenance and current availability | Aggregate sensitive assets |
| System is ready | Exercise or operational test against a stated objective | Publish method and finding, not exploitable detail |
| Intervention worked | Baseline, comparator where feasible, outcome, cost and unintended effects | Show uncertainty and independent review |
Evidence contractDefinition · geography · function · period · source · method · owner · uncertainty · verification · access classification.
Cyber, Critical Infrastructure & Strategic Reserves
Remove single points of failure from the systems that keep society functioning.
Strategic Energy Security
Assess crude oil, gas, coal, electricity, renewables, batteries and critical-mineral dependencies and diversify excessive concentration.
The operating chain should identify prevention, detection or monitoring where lawful, trained people, infrastructure, information, command, logistics, backup, response, recovery, maintenance, audit, correction and learning.
Choose proportionate action that can be maintained and tested.
Classify critical functions and control access to sensitive records.
Set minimum redundancy and recovery objectives by service consequence.
Exercise backups, manual continuity and restoration.
Rotate and audit reserves with transparent non-sensitive assurance.
Protect urgent functions, pilot safely and transform verified gaps.
Define and protect
Confirm the function, consequence, owner, immediate exposure, current backup, response route and legal boundary.
Diagnose and design
Map dependencies, evidence gaps, failure modes, alternatives, maintenance, workforce, cost and safe evaluation.
Bounded pilot
Map one district hospital–power–water–telecom dependency chain, test safe continuity procedures and close the highest-consequence gaps.
Evaluate and transform
Scale only after independent review of performance, resilience benefit, rights, lifecycle viability and unintended consequences.
Track real capability and service continuity—not activity alone.
Preserve rights, oversight and operational security.
- RiskCentral register becoming a targetLegal basis, accountable owner, access control, independent review, correction and remedy required.
- RiskCompliance paperwork replacing real testsLegal basis, accountable owner, access control, independent review, correction and remedy required.
- RiskStockpiles expiring or crowding out routine servicesLegal basis, accountable owner, access control, independent review, correction and remedy required.
- RequiredCivilian and democratic oversight, due process, privacy, non-discrimination and proportionalitySecurity objectives do not remove legal and constitutional responsibilities.
- RequiredPublic-safe evidence and controlled operational detailNever crowdsource or publish exploitable vulnerability information.