Call: Ensured infrastructure resilience in case of Pandemics

The reliable, robust and resilient operation of infrastructures is vital for the security, well-being and economic prosperity of people in Europe. They provide the basis for our daily lives, connect people to each other and guarantee different kinds of social and economic interactions. To be able to allow for such interactions, be it in transport, communications or services, infrastructures has grown more complex to keep up with the development of modern societies, while at the same time ensuring their resilience against disasters and the impacts of climate change and other factors that affect society e.g. demographic changes. Infrastructures operate and function in a rapidly evolving socio-technological and threat environment with increasingly interconnected networks highly reliant upon one another, which presents both risks and opportunities for their protection. They must be resilient towards different expected and unexpected events, emerging risks, be they natural or man-made, unintentional, accidental or with malicious intent.

The Security Union Strategy [[COM(2020) 605 final.]] identifies the protection of critical infrastructures as one of the main priorities for the EU and its Member States for the coming years. Specific reference is established to growing interconnectivity as well as emerging and complex threats: technological trends like the use of Artificial Intelligence and the rapid development of sophisticated unmanned vehicles, the impact of natural and man-made disasters, as well as major crisis scenarios like the COVID-19 pandemic and unexpected events. Infrastructure preparedness and protection is a technologically complex domain, affected by various global developments and thus needs to be supported by targeted security research. This Work Programme aims at supporting the protection of European infrastructures with relevant projects, enabling public and private actors to meet current and emerging challenges.

Technologically complex applications offer the possibility for better prevention and preparedness, can enable efficient response to different threats and faster recovery. But at the same time, they create new vulnerabilities. The potential damage resulting from their disruption can escalate rapidly and negatively affect wider parts of vital societal functions. For instance, this is the case of satellite-based positioning and timing systems, which provide a wealth of high quality Positioning, Navigation and Timing (PNT) services that are exploited by critical infrastructures such as transport and logistics, energy grids, drinking water network, dams, telecom networks or financial markets. Global Navigation Satellite System (GNSS) disruption or denial of services is recognised as an important economic and societal threat.

Infrastructures in the European Union are a high-value target for terrorist groups as well as agencies of third countries. With the Directive on identification and designation of European critical infrastructures and assessment of the need to improve their protection [[Directive (EU) 2008/114.]] the EU and its Member States have created a basis for a common approach towards protection. Under the umbrella of the new Security Union Strategy, the regulatory framework for critical infrastructure protection is currently under revision. The Proposal for additional measures on Critical Infrastructure Protection which is part of the European Commission work programme for 2020 [[COM(2020) 440 final. ]] is also making use of the significant results that security research has produced over the last decade.

Especially in the cyber-domain, the risks have been constantly growing in recent years, with both more frequent and more sophisticated attacks. In addition, criminals, and state-sponsored entities are utilising different tools for carrying out cyber-attacks on infrastructures with the help of cyber-tools for personal or political gain (e.g. extortion, blackmailing). The EU has acknowledged the strong role of the cyber dimension in infrastructure protection, most notably in the Directive on security of network and information systems [[Directive (EU) 2016/1148.]] and its revision, proposed in December 2020 [[COM(2020) 823 final.]] . Large-scale data mining of cross-sectoral information should be supported by targeted research on appropriate AI techniques and infrastructure. For instance for mission-critical systems it is essential to be able to react quickly, efficiently, safely and secure to different and complex scenarios enabling effective and informed decision-making based on sufficient available and trustworthy data.

Physical attacks are less frequent, but cases in the EUs neighbourhood have shown the destructive potential of new technologies used for attacks such as Unmanned Aerial Vehicles (UAVs), which can also be used for intentional disruptions that pose danger to safe operations of infrastructures and create significant economic losses.

Hybrid threats are of particular relevance in the overall risk scenarios, since they are designed to target vulnerabilities and aim in many cases at disrupting infrastructure and its services, making use of different methods. Hybrid threats, techniques and means encompass a combination of physical and cyber-attacks or disruptions, diplomatic, military and political as well as economic means. The effects of cyber-instruments and disinformation are crucial elements of such malevolent strategies and create the need for comprehensive preparedness to avoid large scale disruptions. As such, both the Joint Framework on Countering Hybrid Threats (2016) [[JOIN/2016/018 final.]] and the Joint Communication on Increasing Resilience and Bolstering Capabilities to Address Hybrid Threats (2018)[[JOIN/2018/16 final.]] pay special attention to the role of infrastructures and state that research should provide better means to counter hybrid threats.

Europe is exposed to a wide range of natural hazards and the vulnerabilities of infrastructures need to be addressed also from that perspective. With certain disasters striking more frequently and more severely, as well as long-term challenges such as climate change, there is a need to deploy innovative solutions to ensure the continuous functioning of European infrastructures exposed to such natural extremes. Security research should in this regard support the regulatory and cooperation measures at European level, such as the Union Civil Protection Mechanism [[Decision No 1313/2013/EU on a Union Civil Protection Mechanism and subsequent amendments.]] and the new EU Adaptation Strategy. On the other hand, new infrastructures technologies themselves (for example energy production and storages, new materials, water protection, etc.) can pose a potential risks for society due to accidents. Therefore, the role of civil protection needs to be reflected in targeted research at the same level as it is the case for different security authorities.

The COVID-19 crisis presents a challenge that is unprecedented in recent European history and it concerns infrastructures in two main dimensions. Pandemics are an extreme stress-test for the function of certain infrastructures (most notably: health, transport and supply-chains) by disrupting established procedures, threatening the function due to infection of workforces and massively scaling up the need for resources. In addition, infrastructures themselves can increase pandemic risk if unsuited to different mitigation measures and promoting virus transmission. This area will build on lessons learnt from the COVID-19 crisis. It will be for certain topics essential also to ensure synergies and coordination of actions with the Health Programme [[Regulation (EU) 2021/522 of the European Parliament and of the Council of 24 March 2021 establishing a Programme for the Union’s action in the field of health (‘EU4Health Programme’) for the period 2021-2027, and repealing Regulation (EU) No 282/2014.]].

Increased complexity in the area of infrastructure protection is not only related to the amplified role of the cyber dimension, but also by the mix of man-made and natural hazards and the growing interdependence. The development of European cities into smart cities has opened up a new domain in infrastructure protection, expanding the perspective beyond classical sectors of (critical) infrastructure since more complex, connected and vulnerable assets are deployed in urban areas. This consideration unveils the still fragile building blocks of smart cities’ technological features and underlines the need to put a stronger emphasis on broader societal challenges and needs. Security research can help to make use of the knowledge acquired in other sectors and to make it usable for local authorities to protect and empowers people and assets in cities and urban areas.

Furthermore, in order to accomplish the objectives of this Destination, additional eligibility conditions have been defined with regard to the active involvement of relevant security practitioners or end-users.

Proposals involving earth observation are encouraged to primarily make use of Copernicus data, services and technologies.

Expected impacts:

Proposals for topics under this Destination should set out a credible pathway to contributing to the following expected impact of the Horizon Europe Strategic Plan 2021-2024:“[…] resilience and autonomy of physical and digital infrastructures are enhanced and vital societal functions are ensured, thanks to more powerful prevention, preparedness and response, a better understanding of related human, societal and technological aspects, and the development of cutting-edge capabilities for […] infrastructure operators […]”

More specifically, proposals should contribute to the achievement of one or more of the following impacts:

• Ensured resilience of large-scale interconnected systems infrastructures in case of complex attacks, pandemics or natural and man-made disasters;
• Upgraded infrastructure protection systems enable rapid, effective, safe and secure response and without substantial human intervention to complex threats and challenges, and better assess risks ensuring resilience and strategic autonomy of European infrastructures;
• Resilient and secure smart cities are protected using the knowledge derived from the protection of critical infrastructures and systems that are characterised by growing complexity.

Expected Outcome:

Projects are expected to contribute to some or all of the following expected outcomes:

• Strategies for the resilience of infrastructure networks and services, and their interaction and vulnerabilities in a context of rapidly changing volumes and patterns of use
• Understanding of inter-dependencies and strategies to overcome disruptions at local – regional – national and European (cross-border) level
• Better understanding of the cascading effects of pandemics for different infrastructures and the services they provide
• Improved procedures to reduce exposure of workforce to infectious diseases and mitigation strategies in case of the infrastructure disruptions or overload caused by the absence of critical workforce, surge of patients in the healthcare services, or disruptions of critical supplies

Scope:

Pandemics such as the COVID-19 crisis and other health risks have the potential to massively disrupt the functioning of infrastructures and vital societal functions. While this is most evident for the health system, the negative impacts reach much further. Resilient infrastructure systems particularly ‘lifeline’ services such as electric power, water and health care are critical for minimizing the societal impact of extreme events. It is essential to develop targeted solutions to ensure continuity of operations of different services and supplies, which are also critical to allow for prevention, preparedness and response to pandemics. This preparedness must also account for climate change as a “threat multiplier”, for example with heatwaves, storms, forest fires or flooding either accelerating the spread of a pandemic or rendering countermeasures like confinement less effective.

Member States remain the primary actors in preventing and responding to the outbreaks of infectious diseases. Enhanced European coordination into capacity-building, improved prevention, preparedness and coordinated response can support their efforts. In order to improve the EU-wide prevention and response to the specific challenges for the functioning of infrastructure in case of a severe infectious disease crises requires targeted security research which can deliver better knowledge, security risk assessment as well preparedness and response emergency planning tools. Public-private cooperation is absolutely essential in order to respond to a crisis as far reaching as a pandemic. Any comprehensive European approach to infrastructure resilience in case of a disruption caused by it, will need to take due account of this cooperation.

In infrastructure protection research, it is of high importance to understand the impact of the pandemic beyond the directly affected health system. The availability of specialised work force and vulnerability assessment of health capacities constitute the essential elements in this regard, as disruption of infrastructures due to the infection of large parts of a specific work force poses the immediate risk of cascading effects. The same is the case for integrated supply-chains for both critical goods, as well as non-essential ones. As such, understanding interdependencies, reducing vulnerabilities and identifying truly critical activities is key for enhancing overall societal resilience against pandemics.

A situation like the COVID-19 crisis, also puts the capacities of different infrastructures under exceptional stress, due to the rapidly increased demand for certain supplies and services and the ensuring change of load stress of different networks (as for example sudden increase in communication, decrease in transport, ensuring essential resources). Such changes in use-patterns open vulnerabilities, as for example increased cyber-risks in the event of teleworking or less physical protection due to staff contingency measures. Design of some critical infrastructure components, such as transport networks and critical manufacturing may in themselves be resilient to the pandemic threat, but put overall societal resilience at risk by promoting disease transmission and being unsuited to different mitigation measures.

The testing and/or piloting of the strategies developed in a real setting with one or more relevant public authorities is an asset; regardless, actions should foresee how they will facilitate the uptake, replication across setting and up-scaling of the capabilities - i.e. solutions, tools, processes et al. – to be developed by the project.

In order to achieve the expected outcomes, international cooperation is advised.

In this topic the integration of the gender dimension (sex and gender analysis) in research and innovation content should be addressed only if the consortium deems it relevant in relation to the objectives of the research effort.

eligible non-EU countries:

• countries associated to Horizon Europe

• low-and middle-income countries

Legal entities which are established in countries not listed above will be eligible for funding if provided for in the specific call conditions, or if their participation is considered essential for implementing the action by the granting authority.

Specific cases:

• Affiliated entities - Affiliated entities are eligible for funding if they are established in one of the countries listed above.
• EU bodies - Legal entities created under EU law may also be eligible to receive funding, unless their basic act states otherwise.
• International organisations - International European research organisations are eligible to receive funding. Unless their participation is considered essential for implementing the action by the granting authority, other international organisations are not eligible to receive funding. International organisations with headquarters in a Member State or Associated Country are eligible to receive funding for ‘Training and mobility’actions and when provided for in the specific call conditions.

Unless otherwise provided for in the specific call conditions , legal entities forming a consortium are eligible to participate in actions provided that the consortium includes:

• at least one independent legal entity established in a Member State;and
• at least two other independent legal entities, each established in different Member States or Associated Countries.

Proposal page limits and layout:

The application form will have two parts:

• Part A to be filled in directly online  (administrative information, summarised budget, call-specific questions, etc.)
• Part B to be downloaded from the Portal submission system, completed and re-uploaded as a PDF in the system

Page limit - Part B: 45 pages