The United States cannot adequately secure its entire critical infrastructure. The infrastructure is too broad and complex. Much of it consists of highly vulnerable legacy software running older supervisory control and data acquisition (SCADA) systems. But the nation can take steps to address vulnerabilities in key areas and mitigate losses in others.
This will require an increased national dialogue on responsibility and accountability. When everything is critical, nothing is critical. Because there is not enough money to provide the security necessary to protect all the critical infrastructure, the first step is to establish priorities. The priority list should be topped by the three most important infrastructures: power, telecommunications and financial services.
These three areas rise above the other elements of the critical infrastructure, and their security must be paramount. Adversaries are already within our networks, lying in wait for the right opportunity to strike to their geopolitical benefit. In addition, the burgeoning Internet of Things is establishing new vulnerabilities for enemies to exploit.
For the full article go to: Signal Magazine https://www.afcea.org/content/presidents-commentary-when-everything-critical-nothing-critical