As infraestruturas críticas nacionais ante às ameaças cibernéticas: Análise comparativa das governanças cibernéticas do Brasil e do Reino Unido, com foco nas Infraestruturas críticas marítimas

Abstract

Industry 4.0 has revolutionized the way people and companies exchange information and data over the internet and in the cloud. Every day more people and systems are connecting and interconnecting in networks and the internet, and this increase in connectivity ends up causing vulnerabilities that could be used for a cyber-attack. The cyber environment does not have clearly defined physical boundaries, so the attribution of responsibility for an action that is difficult to be fully confirmed. Global losses due to cybercrime are growing every day and, to be on guard, governments and companies have also increased their investments in cybersecurity. Critical maritime infrastructures and critical maritime infrastructures are facilities, services, goods and systems that are vital to society, and if they are destroyed or have their performance degraded, they will have a serious social, economic, political, international or national security impact on a country. Although most of these critical infrastructures are operated by the private sector, governments have sought to adopt cyber governance, whether through the publication of regulations and laws, or through initiatives aimed at increasing the cyber security and resilience of these infrastructures. This work analyzed and compared the cyber governances of Brazil and the United Kingdom, in order to identify possible deficiencies in Brazilian cyber governance regarding the protection of these infrastructures. For this comparison, 08 criteria were used. During the comparison, it was found that Brazil, since 2009, has adopted several initiatives in the cybernetic field, and from 2018 onwards it has implemented actions aimed at increasing the security of the country's critical infrastructures, but it still lacks the implementation of several guidelines contained in standards. and publications, as well as the publication of some norms that are foreseen. Brazil does not have a specific cyber governance aimed at protecting critical maritime infrastructures, and to remedy this deficiency, a Maritime Security Strategy or similar document must be prepared that discloses cyber guidelines and guidelines for the maritime sector. The United Kingdom, on the other hand, considers cyber threats as the highest priority for the country, and thus has made large investments in research and development, and in solutions that increase cyber security and the resilience of critical sectors, including critical infrastructure. Regarding critical maritime infrastructure, this country has taken several actions, such as the publication of strategies and standards, code of practice and guide to good practices that guide the maritime sector to protect itself from cyber threats