KPMG and Microsoft Brought Together Experts on Protecting Critical Infrastructure

Zagreb, May 8, 2026. - What happens when an energy supply disruption, a failure of communication networks, and transportation disruptions occur simultaneously? These were precisely the kinds of scenarios and questions of system preparedness discussed at the conference “Systemic Resilience for Europe: Securing Critical Infrastructure in an Era of Uncertainty,” organized by KPMG in Croatia and Microsoft.

At a time of increasingly frequent climate extremes, cyber threats, and geopolitical instability, the security of energy and water supply, transportation system stability, and the reliability of digital networks have become essential to the everyday functioning of society. Conference participants warned that systems are becoming increasingly interconnected, while their management remains fragmented.

Although risks are now better recognized, significant practical challenges remain. Data is dispersed across institutions, information sharing is limited, and decisions are often made without a complete overview of the situation.

In crisis situations, a lack of coordination can result in slower responses and reduced system efficiency, with consequences that quickly spill over into citizens’ daily lives.

A central theme of the conference was the gap between the strategic understanding of risks and the actual operational capability of systems to respond to them.

It was emphasized that many stakeholders possess valuable data, but without an integrated view of the interdependencies between infrastructure systems, as well as common tools and a shared “language” across sectors, this data rarely translates into concrete and actionable measures.

Attention was given to the fact that disruption in one system can rapidly trigger cascading effects in others - for example, an energy sector failure can cause communication outages and transportation disruptions.

“Today, it is no longer enough to simply identify risks. They must be continuously monitored, their interdependencies understood, and decisions made based on real-time data. This requires both technology and stronger collaboration among institutions and sectors,” said Daniel Lenardić, partner, KPMG in Croatia.

During the conference, participants stressed that although risks are increasingly recognized and analyzed, serious practical challenges still exist. Data is often scattered across institutions, analyses remain static, and information exchange is limited, leading to slower response times, weaker coordination, and more difficult decision-making during crises.

Participants agreed that available solutions have significantly advanced in recent years. Concrete examples were presented, including the integration of geospatial, climate, operational, and security data into unified analytical frameworks; risk quantification and scenario simulations to better predict the impact of crisis events; digital platforms enabling a shared view among all relevant stakeholders; and tools supporting rapid, evidence-based decision-making in uncertain conditions.

This approach shifts risk management from a reactive to a proactive model, with a focus on the continuous management of system resilience.

“Cyber threats today have a direct impact on the economy and citizens’ security. Artificial intelligence is elevating security to a new level, from advanced threat detection to proactive defense. In such an environment, organizations that continuously invest in security are not only managing risks but also building trust and resilience in the digital economy. Microsoft analyzes more than 100 trillion security signals every day and, through its European Security Program - available to governments free of charge - shares insights and strengthens Europe’s resilience. Additionally, we contribute to the development and education of Croatian cybersecurity experts,” emphasized Tomislav Vračić, Regional Technology Director, Southern Europe Multi-Country Cluster, Microsoft.

The conference conclusions confirmed that strengthening the resilience of critical infrastructure has a direct impact on citizens’ daily lives - from safer energy and water supply, stable communication networks, and reliable transportation, to more effective institutional responses in crisis situations.

For the public sector and infrastructure operators, resilience also means lower financial losses during crises, greater alignment with the European regulatory framework, improved readiness to utilize EU funds, and, in the long term, stronger public trust in institutions.