Skip to agency navigation
Skip to main content

Official website

of the Commonwealth of Pennsylvania

    The .gov means it's official.

    Local, state, and federal government websites often end in .gov. Commonwealth of Pennsylvania government websites and email systems use "pennsylvania.gov" or "pa.gov" at the end of the address. Before sharing sensitive or personal information, make sure you're on an official state website. 

    Infrastructure and Key Resources

    Find out more about assets, systems, and reserves that are essential to our economy, government, and way of life.

    Identification and protection

    The Governor's Office of Homeland Security (OHS) works with state departments and agencies, plus industry leaders to define critical infrastructure and key resources (CIKR) throughout the Commonwealth.

    Some examples of critical infrastructure and key resources could be:

    • Power stations and grids
    • Highway systems
    • Government buildings
    • A reservoir for drinking water

    The disruption or destruction of CIKR may weaken or degrade:

    • State and national security
    • The economy
    • Public health
    • Public safety

    National Infrastructure Protection Plan (NIPP)

    The U.S. Department of Homeland Security (DHS) has developed the NIPP. It protects critical national assets. Each state develops and installs a critical infrastructure protection plan or program. 

    Pennsylvania’s program is the Critical Infrastructure Protection Program (CIPP). It addresses responsibilities at the state, county, and municipal levels. These roles and duties are set by federal and state law.

    Cybersecurity and Infrastructure Security Agency (CISA) Gateway

    OHS uses a tool called CISA Gateway. It is a secure DHS online tool for physical and cyber security assessment and analysis. During an emergency at a critical site, it helps:

    • Law enforcement
    • Public safety
    • Emergency response

    Protected Critical Infrastructure Information (PCII)

    The DHS manages the PCII program. It is for owners and operators of private sector CIKR and significant special events. PCII encourages them to share sensitive, security-related business information with the federal government.

    The PCII program offers software for information sharing. 

    The CII Act is the Critical Infrastructure Information Act of 2002. Data submitted to PCII should adhere to the CII Act. It protects data from public disclosure under:

    • The Freedom of Information Act
    • State and local disclosure laws
    • Civil litigation

    Federal, state, and local analysts use PCII to:

    • Analyze and secure critical infrastructure and protected systems
    • Identify vulnerabilities
    • Develop risk assessments
    • Enhance recovery preparedness measures