Critical Infrastructure in the Slovak Republic

6. apríla 2025

Cpt. Mgr. et Mgr. Diana Santusová

Inspection Service Office

Inspection Unit

Department of Inspection Service West, Bratislava

Cpt. Mgr. Bc. Peter Jakubík, LL.M.

Police Force Presidium

 National Criminal Agency, Bratislava branch

Introduction to the Issue
Critical infrastructure can undoubtedly be considered a modern phenomenon, as this assertion is derived primarily from the fact that in recent times, the basic tendency in the development of the security environment has been deepening instability and change, or the disproportionate increase in the quality of threat sources and real security risks. As a result, there is a constantly growing interest among allies in the European security space to address important issues concerning the effective protection and defense of critical infrastructure, not only at the national but also at the international level. 1 In addition to the frequently discussed global threat called terrorism, or other threats caused by human negligence or intent, various extraordinary events that occur without any possibility of our influence can have an unimaginable impact on a country's critical infrastructure or on the "healthy" functioning of the country and its internal security. These include natural disasters, unavoidable catastrophes, massive accidents, and the like.
At this point, we can therefore unequivocally state that properly selected and well-thought-out protection and effective defense of critical infrastructure is of fundamental importance not only for the internal security of our country but also for the internal security of the entire European Union. In this context, we can define the EU as a strong international grouping of countries that jointly strive to find effective and timely, but above all preventive measures to counter the negative manifestations of failing states and various expected or unexpected and unpredictable security threats.

Critical Infrastructure in the Slovak Republic
Given the above facts, critical infrastructure in the Slovak Republic can essentially be characterized as objects of special importance, other important objects, selected information and communication means, facilities for the production and supply of water, electricity, oil and natural gas, and other parts of state property and business entities, legal and natural persons designated by the Government of the Slovak Republic or another competent state administration body. These are essential for managing crisis situations, protecting the population and property, ensuring the minimum functioning of the economy and state administration, as well as its external and internal security, and which need to be specially protected. We can also state that these are facilities, services, and information systems vital for all residents and state governance, the malfunction or destruction of which may threaten significant security interests of the state, which can cause various negative or even catastrophic consequences. 2
Council Directive 2008/114/EC characterizes critical infrastructure as a component, system, or part thereof that is essential for maintaining the basic functions of society, health, protection, security, and quality of life of citizens from an economic and social perspective, and whose disruption or destruction would have serious consequences in a Member State due to the inability to maintain these essential functions. 3
The issue of critical infrastructure in our country is legislatively regulated by the Act of the National Council of the Slovak Republic No. 45/2011 Coll. of February 8, 2011, on critical infrastructure, which addresses the organization and competence of state administration bodies in the field of critical infrastructure, the procedure for determining a critical infrastructure element, the obligations of operators in protecting critical infrastructure elements, and liability for breaching these obligations. According to Section 2 of this Act, a critical infrastructure element means, in particular, an engineering structure, service in the public interest, and information system in the critical infrastructure sector, the disruption or destruction of which would have, according to sectoral criteria and cross-cutting criteria, serious adverse or even devastating consequences for the implementation of the economic and social function of the state, and thus directly on the quality of life of residents in terms of protecting their lives, health, safety, property, and the environment. 5 The primary objective of the aforementioned law on critical infrastructure is essentially, in accordance with the already mentioned EU Council Directive, to improve the protection of the most important infrastructure, especially against the strengthening threat of terrorist attacks. It is important to emphasize here that this directive - Council Directive 2008/114/EC on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection - has been properly implemented into our law.
The rather complex and lengthy process of drafting the law on critical infrastructure began with the approval of a document entitled "Concept of Critical Infrastructure in the Slovak Republic and the Method of its Protection and Defense," which was approved by the resolution of the Government of the Slovak Republic No. 120 of February 14, 2007. This resolution instructed the Minister of Interior of the Slovak Republic, in cooperation with ministers and chairpersons of other central state administration bodies of the Slovak Republic, to prepare and submit to the Government of the Slovak Republic a draft law on critical infrastructure. 6
In the Concept of Critical Infrastructure in the Slovak Republic and the Method of its Protection and Defense, critical infrastructure is defined as that part of the national infrastructure (selected organizations and institutions, objects, systems, facilities, services, and systems) whose destruction or impairment due to the effect of a risk factor causes a threat or disruption to the political and economic functioning of the state or threat to the life and health of the population. It is necessary to emphasize that one of the main tasks of the security policy of the Slovak Republic is the continuous assessment of risks and threats, focusing primarily on the threat of terrorism, both at the national and international levels, where risk analysis is an essential prerequisite for understanding threats in an increasingly global world. 7
A continuation of this arduous process of drafting the law on critical infrastructure was the development of the National Program for the Protection and Defense of Critical Infrastructure in the Slovak Republic, which was approved by the government by Resolution No. 185 of March 26, 2008. This national program included the preparation of individual specific ministries and other central state administration bodies for the first identification of the most important sectors and subsectors of national infrastructure, where the current state of these sectors was also assessed.
In connection with the already mentioned significant concept of critical infrastructure, it is also necessary to mention that in the document called the Security Strategy of the Slovak Republic, which was approved by the National Council of the Slovak Republic, it is declared that the Slovak Republic will not only ensure the security of critical infrastructure against terrorist attacks but will also take measures to limit the vulnerability of critical infrastructure elements with emphasis on information and communication systems, and to minimize the negative consequences of attacks on them. It will continue activities aimed at the security and integrity of information and communication systems, especially systems necessary for the safe performance of basic state functions. 8
The National Program for the Protection and Defense of Critical Infrastructure in the Slovak Republic, which aimed to assess the current state and identify the most important infrastructure in the country, as well as determine specific program steps to improve and enhance its previously designated protection and defense, identified and elaborated 9 basic sectors.³
Currently, according to the current valid law on critical infrastructure and its Annex No. 3, the main sectors and their subsectors under the authority of central bodies include:
  1. transport under the authority of the Ministry of Transport and Construction of the Slovak Republic with subsectors: road transport, air transport, water transport, rail transport;
  2. electronic communications under the authority of the Ministry of Transport and Construction of the Slovak Republic with subsectors: satellite communication, networks and services of fixed electronic communications and mobile electronic communications;
  3. energy under the authority of the Ministry of Economy of the Slovak Republic with subsectors: mining, electricity, gas industry, oil and petroleum products;
  4. post under the authority of the Ministry of Transport and Construction of the Slovak Republic with subsectors: provision of postal services, postal payment system, and procurement activities;
  5. industry under the authority of the Ministry of Economy of the Slovak Republic with subsectors: pharmaceutical industry, metallurgical industry, chemical industry;
  6. information and communication technologies under the authority of the Office of the Deputy Prime Minister of the Slovak Republic for Investments and Informatization with subsector: information systems and networks;
  7. water and atmosphere under the authority of the Ministry of Environment of the Slovak Republic with subsectors: meteorological service, water structures, provision of drinking water;
  8. healthcare under the authority of the Ministry of Health of the Slovak Republic;
  9. finance under the authority of the Ministry of Finance of the Slovak Republic with subsectors: banking, financial markets, public finance management systems. 9

For the inclusion of another new sector, it must meet certain criteria for inclusion in the list of critical infrastructure sectors, with criteria such as the probability of a terrorist attack, threat from other factors, probability of a serious event, etc. being assessed. In each case under consideration, all risks affecting the given object are taken into account and analyzed, whether they are anthropogenic or natural risks. One of the most significant criteria can undoubtedly be considered its replaceability, where consideration is given primarily to the possibility of replacing the enterprise within the district, region, or country, with the lower the degree of replaceability, the higher the possible risk. 10

Protection of Critical Infrastructure
The protection of critical infrastructure can now be characterized primarily as a dynamic process, which is oriented primarily to properly secure the functioning of critical infrastructure entities and objects that these entities de facto own or possibly just operate, while functioning with the aim of preventing their failure when reflecting all possible risks and threats. In general, we can briefly state that the goal of critical infrastructure is to minimize the consequences of disruption of functions, activities, or services to the highest possible extent so that in case of disruption, it is short-term from the time perspective, or as short as possible, further that it is manageable even if only in a provisional way, and last but not least, from the territorial aspect, it is territorially limited exclusively so that such disruption affects the smallest possible number of the population. 11
In light of the above, we consider it necessary to recall that the subjects of critical infrastructure are not only owners but also operators of either production or non-production systems that create products or provide services that represent a part of critical infrastructure, and objects of critical infrastructure are, on the contrary, specific buildings and facilities of public infrastructure, but also various other elements that are either owned or operated by critical infrastructure entities. 12
Given today's constantly evolving international relations between countries, which are truly in many cases members of various huge international groupings, it can be stated that currently, the protection of critical infrastructure, not only at the international but also at the domestic or national level, involves primarily international partners, international organizations, and in cooperation with them, the government, public administration, territorial units, self-government, state economic entities, and private economic entities. The protection and defense of critical infrastructure essentially represents a set of various relatively complex activities, mechanisms, forces, and means that are tasked with ensuring effective prevention against risk factors, averting a possible attack on any element of critical infrastructure in case of its threat, but also preventing negative external or internal influences threatening the stability and functioning of a given element of critical infrastructure, or even its existence. In conclusion, they are also tasked with addressing any possible disruption of critical infrastructure, especially by removing the consequences, which currently operates based on the National Program for the Protection and Defense of Critical Infrastructure in the Slovak Republic. 13
The protection of critical infrastructure is also addressed by the already mentioned law on critical infrastructure, which in this context primarily determines the obligations of operators, who must take all necessary measures to ensure the specified level of protection to adequately protect the critical infrastructure element so that absolute functionality, continuity, and integrity of this element are ensured, while also ensuring timely aversion, mitigation, or neutralization of identified possible threats and risks. One of the most basic obligations of the operator, all of which are specified in Section 9 of the law on critical infrastructure, can be considered the obligation of the operator to apply technology that ensures its protection during modernization of the element, to introduce a security plan after prior expression of the relevant central authority within six months of receiving notification of the determination of the element and its inclusion in the sector, to continuously review the security plan and, if necessary, to introduce an updated security plan after prior expression of the relevant central authority, to familiarize its employees to the necessary extent with this security plan, to practice according to the security plan at least once every three years a model situation of threat of disruption or destruction of a specific element, to designate an authorized person who is also a contact person if it is an element of European critical infrastructure, to proceed according to the security plan in case of a real threat of disruption or destruction of the element. .15
In general, we can state that the main task of critical infrastructure protection is to prevent any disruption of systems that form part of critical infrastructure, which primarily involves the use of specific measures and principles that can minimize possible threats to critical infrastructure. This is essentially a process that takes into account to the highest possible extent all possible risks and threats and at the same time aims to properly secure specifically designated critical infrastructure entities and mutual relationships between them.

Resilience of Critical Infrastructure Elements
From what has been stated so far, it is undoubtedly clear that each specific element of critical infrastructure can really threaten not only the security and economic interests of the state but also the very functioning of the state, which could result in a truly fundamental interference with the daily life of our modern society. However, it cannot be forgotten that damage to critical infrastructure, its disruption, or in the worst case even destruction, can have a negative impact not only on our state but also on neighboring states, 16 and therefore it is necessary to mention the resilience of individual critical infrastructure elements in this issue.
In connection with the resilience of critical infrastructure elements, we consider it necessary to state that a high level of resilience of a critical infrastructure element essentially allows the preservation of all necessary functions to ensure its further functioning in case of some disruption. Based on this, it is clear that the achieved degree of resilience of critical infrastructure elements determines which functions the element is capable of covering even in case of its burden by negative and undesirable influences, i.e., in case of its direct threat - disruption. In the current time of relatively frequent extraordinary events putting pressure on individual elements of critical infrastructure, it is necessary for competent parties to focus on ensuring quality equipment and preparation of potential elements of critical infrastructure in such a way that they are prepared and able to withstand negative phenomena and, in case of their direct impact, restore their basic functions as quickly as possible.
Resilience in this context can be defined as the ability of a system to absorb disruption, to bear negative changes in the system, and at the same time the ability of subsystems to secure and maintain necessary functions, structure, and feedback for further operation. As a result, there is no doubt that determining the resilience of critical infrastructure elements is to be considered essential and non-negligible from the perspective of critical infrastructure protection. To determine the resilience of individual elements of critical infrastructure, or critical infrastructure as a comprehensive whole, it is necessary to formulate its indicators, which can include robustness, redundancy, and responsiveness. However, the actual calculation of resilience is directed primarily to the area of electricity, as this subsector of critical infrastructure can be considered one of the most basic in terms of human existence. 17 

Conclusion
Infrastructure in the Slovak Republic can be characterized as highly vulnerable and interconnected, and it should be emphasized that the issue dealing with its protection is extremely broad, which may be due to the fact that critical infrastructure is vitally important for the functioning of society in our country. 18 In the Slovak Republic, over several years, critical infrastructure and the tasks necessary for its protection have been clearly identified, which, however, does not mean that critical infrastructure does not require further attention, as we must not forget that the protection and defense of critical infrastructure is not a one-time matter, but will always be a relatively demanding and continuously evolving process. From the above, it clearly follows that not only all departments that are in any way responsible for individual sectors of critical infrastructure, but also the operators of critical infrastructure elements themselves are obliged to pay appropriate and thus considerable attention to the protection of critical infrastructure at such a level that its methods are constantly developed and that the latest trends and knowledge at the international level in this area are incorporated into its improvement. 19

Literature
KELEMEN, Miroslav and Vladimír BLAŽEK. Defense and Crisis Management in Public Administration I. Liptovský Mikuláš: Armed Forces Academy of General Milan Rastislav Štefánik in LM, 2011. ISBN 978-80-8040-423-9. KEMÉŇOVÁ, Eva. 2012. Using Crisis Scenarios for the Protection of European Critical Infrastructure. In: Perspectives of Public Administration Development in European Union Countries: Proceedings from a National Scientific Seminar. Bratislava: Academy of the Police Force in Bratislava, pp. 83-93. ISBN: 978-80-8054-535-2. CHOVANČÍKOVÁ, Nikola. Resilience of Critical Infrastructure Elements. In: Crisis Management. 2018, vol. 17, no. 2, pp. 51-59. MARCHEVKA, Peter. 2011. Present and Future of Critical Infrastructure in the Slovak Republic. In: Crisis Management. 2011, vol. 10, no. 2. pp. 72-77. SELINGER, Pavel. 2011. Critical Infrastructure and Its Protection Possibilities. In: Crisis Management. 2011, vol. 10, no. 2, pp. 89-92. ŠENOVSKÝ, Michal; ADAMEC, Vilém and Pavel ŠENOVSKÝ. Protection of Critical Infrastructure. Ostrava: SPBI Spectrum Edition, 2007. ISBN 978-80-7385-025-8. ŠIMÁK, Ladislav; HORÁČEK, Jiří; NOVÁK, Ladislav; NÉMETH, Ľudovít and Vladimír MÍKA. Terminological Dictionary of Crisis Management. Žilina: FŠI ŽU, 2005. ŠULC, M. Critical Infrastructure. In: Law-Security-Information. 2019, vol. 6, no. 1. VIDRIKOVÁ, Dagmar and Kamil BOC. Protection of Critical Infrastructure: Part I. Žilina: FŠI ŽU, 2013. ISBN 978-80-554-0654-1. Security Strategy of the Slovak Republic, 2005. Concept of Critical Infrastructure in the Slovak Republic and the Method of its Protection and Defense. MINISTRY OF INTERIOR SR, 2019. Protection of Critical Infrastructure. [online]. [cit. 29.05.2019] Available on the internet: https://www.minv.sk/?Ochrana_kritickej_infrastruktury . Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection, 2008. Act of the National Council of the Slovak Republic No. 45/2011 Coll. of February 2011 on critical infrastructure.

S U M M A R Y
SANTUSOVÁ, Diana; JAKUBÍK, Peter: CRITICAL INFRASTRUCTURE IN THE SLOVAK REPUBLIC The article deals with critical infrastructure in the Slovak Republic, defining this term with respect to several aspects and characterizing some other basic concepts that are directly related to the issue of critical infrastructure in our country. In the article, the author also deals with some phases of the legislative process that preceded the issue of the Critical Infrastructure Act, in which the relevant European Union Directive was implemented in accordance with the law. At the end of the article, the author also pays attention to the protection and defense of critical infrastructure in the Slovak Republic. Key words: critical infrastructure, sector, security risk, protection and defense, concept, threat. 

  1. KELEMEN, Miroslav a Vladimír BLAŽEK. Obrana a krízový manažment vo verejnej správe I. Liptovský Mikuláš: Akadémia ozbrojených síl generála Milana Rastislava Štefánika v LM, 2011, s. 165-166.
  2. ŠIMÁK, Ladislav; HORÁČEK, Jiří; NOVÁK, Ladislav; NÉMETH, Ľudovít a Vladimír MÍKA. Terminologický slovník krízového riadenia. Žilina: FŠI ŽU, 2005, s. 44.
  3. Smernica Rady 2008/114/ES z 8. decembra 2008 o identifikácii a označení európskych kritických infraštruktúr a zhodnotení potreby zlepšiť ich ochranu, 2008.
  4. Zákon č. 45/2011 Z.z. o kritickej infraštruktúre, § 2.
  5. MINISTERSTVO VNÚTRA SR, 2019. Ochrana kritickej infraštruktúry. [online]. [cit. 29.05.2019] Dostupné na internete: https://www.minv.sk/?Ochrana_kritickej_infrastruktury.
  6. Koncepcia kritickej infraštruktúry v Slovenskej republike a spôsob jej ochrany a obrany.
  7. Bezpečnostná stratégia Slovenskej republiky, 2005.
  8. V zmysle § 2 písm. b) zákona č. 45/2011 o kritickej infraštruktúre cit.: „sektorom kritickej infraštruktúry časť kritickej infraštruktúry, do ktorej sa zaraďujú prvky; sektor môže obsahovať jeden alebo viac podsektorov kritickej infraštruktúry.“
  9. V zmysle § 2 písm. a) zákona č. 45/2011 o kritickej infraštruktúre cit.: „Prvkom kritickej infraštruktúry najmä inžinierska stavba, služba vo verejnom záujme a informačný systém v sektore kritickej infraštruktúry, ktorých narušenie alebo zničenie by malo podľa sektorových kritérií a prierezových kritérií závažné nepriaznivé dôsledky na uskutočňovanie hospodárskej a sociálnej funkcie štátu, a tým na kvalitu života obyvateľov z hľadiska ochrany ich života, zdravia, bezpečnosti, majetku, ako aj životného prostredia.“
  10. Zákon č. 45/2011 Z.z. o kritickej infraštruktúre, príloha č. 3.
  11. SELINGER, Pavel. Kritická infraštruktúra a možnosti jej ochrany. In: Krízový manažment. 2011, roč. 10, č. 2, s. 89-92
  12. ŠENOVSKÝ, Michal; ADAMEC, Vilém a Pavel ŠENOVSKÝ. Ochrana kritické infrastruktury. Ostrava: Edice SPBI Spektrum, 2007, s. 47.
  13. SELINGER, Pavel. Kritická infraštruktúra a možnosti jej ochrany. In: Krízový manažment. 2011, roč. 10, č. 2, s. 89-92.
  14. KELEMEN, Miroslav a Vladimír BLAŽEK. Obrana a krízový manažment vo verejnej správe I. Liptovský Mikuláš: Akadémia ozbrojených síl generála Milana Rastislava Štefánika v LM, s. 165-166.
  15. Zákon č. 45/2011 Z. z., o kritickej infraštruktúre, § 9.
  16. ŠULC, M. Kritická infrastruktura. In: Právo-Bezpečnost-Informace. 2019, roč. 6, č. 1
  17. CHOVANČÍKOVÁ, Nikola. Odolnosť prvkov kritickej infraštruktúry. In: Krízový manažment. 2018, roč. 17, č. 2. s. 51-59.
  18. VIDRIKOVÁ, Dagmar a Kamil BOC. Ochrana kritickej infraštruktúry: I. časť. Žilina: FŠI ŽU, 2013, s. 51.
  19. MARCHEVKA, Peter. Súčasnosť a budúcnosť kritickej infraštruktúry v Slovenskej republike. In: Krízový manažment. 2011, roč. 10, č. 2. s. 72-77.


Source: Santusová, Diana, and Peter Jakubík. “Kritická infraštruktúra v Slovenskej republike.” 2020. https://veda.polac.cz/wp-content/uploads/2020/11/Kriticka-infrastruktura-v-Slovenskej-republike.pdf.  Accessed: 6. 4. 2025

13. apríla 2025
Critical Infrastructure Protection at the European Union Level
13. apríla 2025
Ochrana kritickej infraštruktúry na úrovni Európskej únie
11. apríla 2025
Yesterday, April 10, 2025, the General Assembly of the Critical Infrastructure Association of the Slovak Republic took place in Bratislava, attended by key experts and representatives of companies active in the field of critical infrastructure protection. The main agenda items included the election of association bodies, acceptance of new members, and discussion on the further strategic direction of the association's activities.
11. apríla 2025
Včera 10. apríla 2025 sa v Bratislave uskutočnilo valné zhromaždenie Asociácie kritickej infraštruktúry Slovenskej republiky, na ktorom sa zúčastnili kľúčoví odborníci a zástupcovia spoločností pôsobiacich v oblasti ochrany kritickej infraštruktúry. Hlavnými bodmi programu bolo zvolenie orgánov asociácie, prijatie nových členov a diskusia o ďalšom strategickom smerovaní činnosti asociácie.
6. apríla 2025
kpt. Mgr. et Mgr. Diana Santusová Úrad inšpekčnej služby útvar inšpekcie Odbor inšpekčnej služby Západ, Bratislava kpt. Mgr. Bc. Peter Jakubík, LL.M. Prezídium Policajného zboru Národná kriminálna agentúra, expozitúra Bratislava
2. apríla 2025
Various aspects of the ongoing conflict in Ukraine are the subject of many discussions at virtually all levels of society. From a business perspective, however, we will try to focus on objective facts.
1. apríla 2025
Rôzne aspekty prebiehajúceho konfliktu na Ukrajine sú predmetom mnohých diskusii azda na všetkých spoločenských úrovniach. Z hľadiska biznisu sa však pokúsime sústrediť na objektívne fakty.
31. marca 2025
Slovensko získalo 101 miliónov eur z európskych prostriedkov na energetické projekty na obnovu Ukrajiny. V pondelok to na tlačovej konferencii povedal minister zahraničných vecí a európskych záležitostí Juraj Blanár (Smer) spolu s generálnym riaditeľom Eximbanky Rastislavom Podhorcom.
31. marca 2025
Slovakia has received 101 million euros from European funds for energy projects aimed at the reconstruction of Ukraine. This was announced on Monday at a press conference by Minister of Foreign Affairs and European Affairs Juraj Blanár (Smer) together with the General Director of Eximbanka Rastislav Podhorec.
30. marca 2025
Cybersecurity is currently a very important topic, especially in Slovakia. In recent months, the country has experienced an increased number of cyber attacks. The average record shows that organizations in the country faced approximately 1,443 attacks weekly. These attacks, which are often automated, use robotic tools to test vulnerabilities.
Ďalšie príspevky