Е-Публикации
Технически университет - София

Abstract: Critical infrastructure restoration (CIR) is a disaster-management and sustainability challenge because prolonged disruption of energy, water, transport, communications, healthcare, and public-administration services can amplify social, economic, and environmental losses. This PRISMA 2020-reported systematic review synthesizes post-2016 scientific literature and official policy, legal, standards, and technical documents on CIR and AI decision support. The review identified 55 records, removed 1 duplicate, excluded 1 ineligible record, and retained 53 core sources for qualitative synthesis, including 31 scholarly publications and 22 official documents. Manual screening was used; no automated screening or AI-assisted exclusion tools were applied. The results are organized around four research questions covering regulatory frameworks, recovery practices, supporting systems, and AI model families. The synthesis shows that CIR is shaped by layered governance through NIS2, the CER Directive, the AI Act, and national measures; by operational recovery practices such as continuity planning, cyber crisis coordination, interdependency mapping, and model-supported restoration; by digital platforms including SCADA/ICS, IoT sensing, GIS/common operating pictures, decision-support systems, simulation environments, and digital twins; and by AI methods ranging from classical machine learning and computer vision to reinforcement learning and generative assistants. However, evidence maturity remains uneven, with many AI applications still simulation-based, sector-specific, or weakly validated in real restoration settings. The review contributes an integrated CIR-oriented framework showing that AI creates practical value when embedded in interoperable, human-supervised, regulation-aware, and empirically validated restoration architectures that support sustainable service continuity rather than isolated automation.

References

1. Liu W. Song Z. Review of studies on the resilience of urban critical infrastructure networks Reliab. Eng. Syst. Saf. 2020 193 106617 10.1016/j.ress.2019.106617
2. Mottahedi A. Sereshki F. Ataei M. Nouri Qarahasanlou A. Barabadi A. The Resilience of Critical Infrastructure Systems: A Systematic Literature Review Energies 2021 14 1571 10.3390/en14061571
3. Wells E.M. Boden M. Tseytlin I. Linkov I. Modeling critical infrastructure resilience under compounding threats: A systematic literature review Prog. Disaster Sci. 2022 15 100244 10.1016/j.pdisas.2022.100244
4. Ji A. He R. Chen W. Zhang L. Computational methodologies for critical infrastructure resilience modeling: A review Adv. Eng. Inform. 2024 62 102663 10.1016/j.aei.2024.102663
5. Alkhaleel B.A. Machine learning applications in the resilience of interdependent critical infrastructure systems: A systematic literature review Int. J. Crit. Infrastruct. Prot. 2024 44 100646 10.1016/j.ijcip.2023.100646
6. Yigit Y. Ferrag M.A. Ghanem M.C. Sarker I.H. Maglaras L.A. Chrysoulas C. Moradpoor N. Tihanyi N. Janicke H. Generative AI and LLMs for Critical Infrastructure Protection: Evaluation Benchmarks, Agentic AI, Challenges, and Opportunities Sensors 2025 25 1666 10.3390/s25061666
7. Afolabi A. Ogunrinde O. Zabihollah A. Digital Twin and AI Models for Infrastructure Resilience: A Systematic Knowledge Mapping Appl. Sci. 2025 15 13135 10.3390/app152413135
8. Ajayi O.O. Kurien A. Djouani K. Dieng L. Artificial Intelligence for Infrastructure Resilience: Transportation Systems as a Strategic Case for Policy and Practice Sustainability 2025 17 8992 10.3390/su17208992
9. Vandezande N. Cybersecurity in the EU: How the NIS2-directive stacks up against its predecessor Comput. Law Secur. Rev. 2024 52 105890 10.1016/j.clsr.2023.105890
10. Alexopoulos M.J. Niemi A. Skobiej B. Sill Torres F. Examination of the Critical Infrastructure Resilience Directive From the Maritime Point of View J. Common Mark. Stud. 2025 63 667 678 10.1111/jcms.13681
11. Ruohonen J. Rindell K. Busetti S. From cyber security incident management to cyber security crisis management in the European Union Comput. Secur. 2025 159 104689 10.1016/j.cose.2025.104689
12. European Union Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 Concerning Measures for a High Common Level of Security of Network and Information Systems Across the Union European Union Brussels, Belgium 2016
13. European Union Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on Measures for a High Common Level of Cybersecurity Across the Union (NIS2 Directive) European Union Brussels, Belgium 2022
14. European Union Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the Resilience of Critical Entities (CER Directive) European Union Brussels, Belgium 2022
15. European Union Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 Laying Down Harmonized Rules on Artificial Intelligence (Artificial Intelligence Act) European Union Brussels, Belgium 2024
16. ENISA NIS2 Technical Implementation Guidance European Union Agency for Cybersecurity Athens, Greece 2025
17. U.S. Department of Homeland Security Safety and Security Guidelines for Critical Infrastructure Owners and Operators on the Safe, Secure, and Trustworthy Development and Deployment of Artificial Intelligence DHS Washington, DC, USA 2024 Available online: https://www.dhs.gov/sites/default/files/2024-04/24_0426_dhs_ai-ci-safety-security-guidelines-508c.pdf (accessed on 4 April 2026)
18. U.S. Department of Homeland Security Roles and Responsibilities Framework for Artificial Intelligence in Critical Infrastructure DHS Washington, DC, USA 2024 Available online: https://www.dhs.gov/sites/default/files/2024-11/24_1114_dhs_ai-roles-and-responsibilities-framework-508.pdf (accessed on 4 April 2026)
19. Cybersecurity and Infrastructure Security Agency Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) Available online: https://www.cisa.gov/topics/cyber-threats-and-advisories/information-sharing/cyber-incident-reporting-critical-infrastructure-act-2022-circia (accessed on 4 April 2026)
20. Dao J. Ng S.T. Yang Y. Zhou S. Xu F.J. Skitmore M. Semantic framework for interdependent infrastructure resilience decision support Autom. Constr. 2021 130 103852 10.1016/j.autcon.2021.103852
21. Cassottana B. Biswas P.P. Balakrishnan S. Ng B. Mashima D. Sansavini G. Predicting Resilience of Interdependent Urban Infrastructure Systems IEEE Access 2022 10 116432 116442 10.1109/ACCESS.2022.3217903
22. Federal Office for Information Security (BSI) The German IT Security Act 2.0 Available online: https://www.bsi.bund.de/EN/Das-BSI/Auftrag/Gesetze-und-Verordungen/IT-SiG/2-0/it_sig-2-0_node.html (accessed on 4 April 2026)
23. Federal Republic of Germany Gesetz zur Umsetzung der Richtlinie (EU) 2022/2557 und zur Stärkung der Resilienz kritischer Anlagen (KRITIS-Dachgesetz). BGBl. 2026 I Nr. 66 16 March 2026 Available online: https://www.recht.bund.de/bgbl/1/2026/66/VO.html (accessed on 4 April 2026)
24. République Française Arrêté du 29 Mai 2019 Fixant les Règles de Sécurité et les Délais Mentionnés à L’article 22 du Décret n° 2015-351 du 27 mars 2015 Relatif à la Sécurité des Systèmes d’information des Opérateurs D’importance Vitale. JORF 2019 Available online: https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000038565011 (accessed on 4 April 2026)
25. Republic of Estonia Cybersecurity Act. Riigi Teataja, Consolidated Version in Force from 1 January 2026 Available online: https://www.riigiteataja.ee/en/eli/ee/523052018003/consolide/current (accessed on 4 April 2026)
26. United Kingdom The Network and Information Systems Regulations 2018. UK Statutory Instruments 2018, No. 506 Available online: https://www.legislation.gov.uk/uksi/2018/506 (accessed on 4 April 2026)
27. National Cyber Security Centre Cyber Assessment Framework 4.0 2025 Available online: https://www.ncsc.gov.uk/files/NCSC-Cyber-Assessment-Framework-4.0.pdf (accessed on 4 April 2026)
28. Savolainen T. McCarthy N. Neville K. Ruoslahti H. Business Continuity Management of Critical Infrastructures from the Cybersecurity Perspective Proceedings of the 2024 IEEE Global Engineering Education Conference (EDUCON) Kos Island, Greece 8–11 May 2024 1 6 10.1109/EDUCON60312.2024.10578811
29. Galaitsi S.E. Pinigina E. Keisler J.M. Pescaroli G. Keenan J.M. Linkov I. Business Continuity Management, Operational Resilience, and Organizational Resilience: Commonalities, Distinctions, and Synthesis Int. J. Disaster Risk Sci. 2023 14 713 721 10.1007/s13753-023-00494-x
30. National Institute of Standards and Technology The NIST Cybersecurity Framework (CSF) 2.0; NIST CSWP 29 NIST Gaithersburg, MD, USA 2024 10.6028/NIST.CSWP.29
31. Cybersecurity and Infrastructure Security Agency Infrastructure Resilience Planning Framework (IRPF), v1.2 CISA Arlington, VA, USA 2024 Available online: https://www.cisa.gov/resources-tools/resources/infrastructure-resilience-planning-framework-irpf (accessed on 4 April 2026)
32. ENISA Best Practices for Cyber Crisis Management European Union Agency for Cybersecurity Athens, Greece 2024 Available online: https://www.enisa.europa.eu/publications/best-practices-for-cyber-crisis-management (accessed on 4 April 2026)
33. ENISA Handbook for Cyber Stress Tests European Union Agency for Cybersecurity Athens, Greece 2025 Available online: https://www.enisa.europa.eu/publications/handbook-for-cyber-stress-tests (accessed on 4 April 2026)
34. ENISA The ENISA Cybersecurity Exercise Methodology European Union Agency for Cybersecurity Athens, Greece 2026 Available online: https://www.enisa.europa.eu/publications/the-enisa-cybersecurity-exercise-methodology (accessed on 4 April 2026)
35. Xu M. Li G. Chen A. Resilience-driven post-disaster restoration of interdependent infrastructure systems under different decision-making environments Reliab. Eng. Syst. Saf. 2024 241 109599 10.1016/j.ress.2023.109599
36. Salvi A. Spagnoletti P. Noori N.S. Cyber-resilience of Critical Cyber Infrastructures: Integrating digital twins in the electric power ecosystem Comput. Secur. 2022 112 102507 10.1016/j.cose.2021.102507
37. Elkady S. Hernantes J. Labaka L. Decision-making for community resilience: A review of decision support systems and their applications Heliyon 2024 10 e33116 10.1016/j.heliyon.2024.e33116
38. Brucherseifer E. Winter H. Mentges A. Muehlhauser M. Hellmann M. Digital Twin conceptual framework for improving critical infrastructure resilience at-Automatisierungstechnik 2021 69 1062 1080 10.1515/auto-2021-0104
39. Puuska S. Rummukainen L. Timonen J. Laaperi L. Klemetti M. Oksama L. Vankka J. Nationwide critical infrastructure monitoring using a common operating picture framework Int. J. Crit. Infrastruct. Prot. 2018 20 28 47 10.1016/j.ijcip.2017.11.005
40. Fischer-Pressler D. Bonaretti D. Bunker D. Digital transformation in disaster management: A literature review J. Strateg. Inf. Syst. 2024 33 101865 10.1016/j.jsis.2024.101865
41. Greenal S. Anilkumar S. Development of decision support tools for post-disaster infrastructure reconstruction and recovery: A scoping study Sustain. Resilient Infrastruct. 2025 10 119 135 10.1080/23789689.2024.2365502
42. Lampropoulos G. Larrucea X. Colomo-Palacios R. Digital Twins in Critical Infrastructure Information 2024 15 454 10.3390/info15080454
43. Lagap U. Ghaffarian S. Digital post-disaster risk management twinning: A review and improved conceptual framework Int. J. Disaster Risk Reduct. 2024 110 104629 10.1016/j.ijdrr.2024.104629
44. Korkmaz M. Zulfikar A.C. Demirkesen S. Leveraging Digital Twins as a Common Operating Picture for Disaster Management: Case of Seismic Hazards ISPRS Int. J. Geo-Inf. 2024 13 430 10.3390/ijgi13120430
45. Therrien M.-C. Manrique Rueda G. Normandin J.-M. Veillette S. Chelihi M. Arnaud J. The common operating picture as a collaborative governance tool for urban resilience J. Contingencies Crisis Manag. 2024 32 e12500 10.1111/1468-5973.12500
46. Pudney S. Mills D. Alaei A.R. Sellers S. Dvorak J. Potluka O. Evaluation of artificial intelligence-enhanced critical infrastructure systems: A conceptual framework Evaluation 2025 31 412 443 10.1177/13563890251350677
47. Yang S. Zhang Y. Lu X. Guo W. Miao H. Multi-agent deep reinforcement learning based decision support model for resilient community post-hazard recovery Reliab. Eng. Syst. Saf. 2024 242 109754 10.1016/j.ress.2023.109754
48. Si R. Chen S. Zhang J. Xu J. Zhang L. A multi-agent reinforcement learning method for distribution system restoration considering dynamic network reconfiguration Appl. Energy 2024 372 123625 10.1016/j.apenergy.2024.123625
49. Jin M. Reinforcement Learning Meets the Power Grid: A Contemporary Survey with Emphasis on Safety and Multi-agent Challenges Found. Trends Electr. Energy Syst. 2025 8 169 316 10.1561/3100000043
50. Mussi M. Metelli A.M. Restelli M. Losapio G. Bessa R.J. Boos D. Borst C. Leto G. Castagna A. Chavarriaga R. et al. Human-AI interaction in safety-critical network infrastructures iScience 2025 28 113400 10.1016/j.isci.2025.113400 40995130
51. Tabassi E. Artificial Intelligence Risk Management Framework (AI RMF 1.0) NIST Trustworthy and Responsible AI, National Institute of Standards and Technology Gaithersburg, MD, USA 2023 10.6028/NIST.AI.100-1
52. Autio C. Schwartz R. Dunietz J. Jain S. Stanley M. Tabassi E. Hall P. Roberts K. Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile NIST Trustworthy and Responsible AI, National Institute of Standards and Technology Gaithersburg, MD, USA 2024 10.6028/NIST.AI.600-1
53. Cybersecurity and Infrastructure Security Agency AI Cybersecurity Collaboration Playbook CISA Washington, DC, USA 2025 Available online: https://www.cisa.gov/sites/default/files/2025-01/JCDC%20AI%20Playbook.pdf (accessed on 4 April 2026)
54. Page M.J. McKenzie J.E. Bossuyt P.M. Boutron I. Hoffmann T.C. Mulrow C.D. Shamseer L. Tetzlaff J.M. Akl E.A. Brennan S.E. et al. The PRISMA 2020 statement: An updated guideline for reporting systematic reviews BMJ 2021 372 n71 10.1136/bmj.n71 33782057

Issue