Normal cyber accidents

Figures & data

Table 1. NA dynamics in the technological layer of critical infrastructure operations.

Layer of critical infrastructure operations	Interactive complexity	Tight coupling
Technology	Layered legacy code and combinations of old and new hardware	Legacy dependence and little/no allowance for downtime

Table 2. NA dynamics in the organisation/cognition layer of critical infrastructure operations.

Layer of critical infrastructure operations	Interactive complexity	Tight coupling
Organisation	Integration between organisational and technical components Lack of comprehensive cognitive understanding of system ecology	Lack of organisational slack/structural flexibility and redundancy Lack of distinction between important/critical and unimportant components

Table 3. NA dynamics in the macro layer of critical infrastructure operations.

Layer of critical infrastructure operations	Interactive complexity	Tight coupling
Macro	Inter-organisational dependencies	Dependence on delivery of supplies/services to keep system running/inability to operate without supply/service delivery Centralisation of services

Table 4. NA dynamics in multiple layers of critical infrastructure operations.

Layer of critical infrastructure operations	System characteristic: Interactive complexity	System characteristic: Tight coupling
Macro	Inter-organisational dependencies	Dependence on delivery of supplies/services to keep system running/inability to operate without supply/service delivery Centralisation of services
Organisational	Integration between organisational and technical components Lack of comprehensive cognitive understanding of system ecology	Lack of organisational slack/structural flexibility and redundancy Lack of distinction between important/critical and unimportant components
Technology	Layered legacy code and combinations of old and new hardware	Legacy dependence and little/no allowance for downtime

Table

Reference	Role/affiliation
Interviewee 1	State 1: Senior expert cybersecurity/critical infrastructure systems (private sector)
Interviewee 2	State 2: Senior expert cybersecurity/ critical infrastructure systems (private sector)
Interviewee 3	State 1: Senior expert cyber defence (private sector)
Interviewee 4	EC3/European Cybercrime Centre
Interviewee 5	State 1: Senior expert cybersecurity/critical infrastructure systems (private sector)
Interviewee 6	State 1: Senior expert cybersecurity/critical infrastructure systems (public sector)
Interviewee 7	State 1: Senior expert cybersecurity/critical infrastructure systems (private sector)
Interviewee 8	State 3: Senior cybersecurity researcher/malware expert (private sector)
Interviewee 9	State 4: Senior expert cybersecurity (private sector)
Interviewee 10	State 1: Senior expert cybersecurity (public sector)
Interviewee 11	State 1: Senior expert cybersecurity (public sector)
Interviewee 12	State 3: Senior expert cybersecurity/threat intelligence (public sector)
Interviewee 13	State 2: Senior expert cybersecurity (public sector)
Interviewee 14	State 1: Senior expert cybersecurity (public sector)