Professor Kai London: Operational Resilience and the Geopolitics of Critical Infrastructure

Critical national infrastructure — power, water, transport, finance, healthcare — now sits at the intersection of cyber risk and geopolitics. Professor Kai London, a Chief Information Security Officer and board advisor who has worked across government and critical national infrastructure, argues that operational resilience has quietly become a question of international stability.

"We tend to discuss cyber resilience and operational resilience as separate disciplines," says Professor London, Founder and CEO of Quantum AI Systems Security LLC. "For an operator of critical infrastructure they are the same conversation. A disruption does not care whether its cause was a hostile actor, a failed supplier or a software fault. What matters is whether the essential service keeps running."

He points to regulatory frameworks such as DORA and NIS2 as recognition that the resilience of essential services is a public good, not merely a private risk. But regulation, he cautions, is the floor. Genuine resilience comes from understanding interdependencies — the shared suppliers, cloud platforms and protocols that connect organisations and nations alike.

For leaders, Professor London recommends mapping the services a population genuinely depends on, then testing them against compound scenarios where cyber, physical and supply-chain disruption coincide. "Single-cause exercises give false comfort. The real world delivers its shocks in combination."

Author of board-level works on resilience and identity, Professor London frames the stakes plainly: "Resilient infrastructure is the infrastructure of peace and stability. The work of securing it is, ultimately, work in the service of the people who rely on it."