Cybersecurity Implications of Data Centres as Critical National Infrastructure 

Data centres are critical to our digital life and are growing in importance as data-hungry applications like artificial intelligence continue to enter the fold.

Against this background, the UK government recently announced that data centres are now recognised as Critical National Infrastructure (CNI).

This elevates them to the same status as water facilities, energy services, healthcare and telecommunications.

This status  does not just cover physical data centers, it also includes the cloud operators that use them to supply ordinary data services like iCloud on iPhones, encompassing companies such as Microsoft, Amazon and Google.

This move means there will be extra government support for the security of data centres in the UK.

The UK is home to the highest number of data centres in Western Europe, with the sector making estimated annual revenues of £4.6bn ($6bn).

It is estimated that there are over 500 data centres across the UK today.

“Data centres power our lives and economies. Without our data centres, then the whole country would grind to a halt. So, it makes perfect sense that they are considered critical infrastructure,” commented Paul Hogan, Global Head of Networks at Onnec, a provider of multi-layered data centre solutions.

Data centres store a large amount of amount of high-value data and provide essential services, making them a lucrative target for cybercriminals and nation state threat actors.

Moreover, a data centre outage can cause huge disruption.

“It’s important they’re recognised as CNI to protect against both physical and cyber threats,” Hogan noted.

One of the biggest challenges for data centres is dealing with insider threats, Hogan explained. This means that access control monitoring is a top priority, with physical security being critical.

Supply chain issues also apply to data centres which rely on a network of both hardware and software suppliers.

“A breach anywhere along the supply chain can compromise security – and allow access to critical systems,” Hogan said.

Piers Wilson, Head of Product Management at Huntsman Security, noted that one challenge unique to data centres compared to other CNI is that data centres cannot be air gapped without removing core functionality. “Interconnectivity is part of their nature,” he said.

Finally, DDoS attacks are also a significant threat because attackers can cause major downtime by overwhelming networks.  

The new CNI designation will help data centres remain protected against IT outages, cyber-attacks and environmental emergencies.

Generally, responsible data centre operators will have a good cybersecurity posture, understanding the key vulnerabilities and how to react quickly to potential threats.

As part of the designation, a dedicated CNI data infrastructure team of senior government officials will be formed to monitor for potential threats, working closely with agencies such as the National Cyber Security Centre (NCSC) and emergency services to ensure data, from photos to NHS records, is protected.

CNI status for data centres allows better coordination and cooperation with the government against cybercriminals and unexpected events.

Wilson said that this support will help both to ensure their security is at the right level, and to mitigate the impact of any attack if the worst does happen.

Hogan noted: “CNI status ensures stronger security, resilience and continuity, helping to maintain critical services even during disruptions. If an attack does happen, the government can step in with contingency plans to minimise damage and protect essential services. This not only helps maintain public trust but also ensures compliance with regulations.”  

The UK government's designation of data centres as CNI underscores their vital role in the nation's digital economy.

This recognition not only highlights the security risks they face but also signals a commitment to providing practical government support to protect these critical assets.

ADVERTISEMENT

Enjoyed this article? Make sure to share it!

Looking for something else?