ENISA survey on the resilience of communication networks

The European Network and Information Security Agency (ENISA) launches a report on resilience of communication networks. The survey reveals a better than expected network availability, with only 10 hours downtime a year. Availability is vital not only to business, but also to private consumers. Service providers show a higher level of service to both actors than expected.

Downtime on your network? The ENISA survey nevertheless shows that there is only 10 hours downtime a year and over 99.9% availability. The availability of networks, services and business continuity is of major concern for all business actors and consumers alike across Europe.

As the number of disruptions increases, network operators and service providers put measures in place to ensure the resilience of public communication networks. However, today there are significant differences in the approaches deployed by network operators and service providers across Europe.

The ENISA survey of network operators across the EU, polled by the end of 2008, is based on 54 responses. The survey found that operators take network resilience seriously:

• Top network threats are hardware, software and location incidents, but also personnel incidents were also significantly represented.
• Operators describe their network and risk management procedures as fairly mature.
• here is no significant variation by size of operator regarding business continuity procedures.

Some key conclusions:

• Some alternative operators, however, are not placing enough priority on resilience. Alternative operators vary widely and are often very small. As such, resilience recommendations may not apply e.g. if they do not operate infrastructure critical to public welfare.
• This ambiguity leads to difficulty for policy-makers as to try to develop industry standards and recommendations for Internet Service Providers (ISPs). Such efforts should be optional, or limited to infrastructure critical to public welfare.
• IDC recommends the production of guidelines for operators to improve the resilience and operations of their networks.

The full report is available here.