Securing Critical Community Infrastructure

Across Europe, millions of people rely daily on organizations that build inclusion, trust, and resilience. These organizations are what we call Critical Community Infrastructure (CCI). 

With the support of Google.org, Virtual Routes is launching an ambitious new project to improve the cybersecurity of this fundamental fabric of society.

This project provides free cybersecurity services to eligible Critical Community Infrastructure organizations, along with potential financial support for implementation.

What is Critical Community Infrastructure?

Critical Community Infrastructure refers to organizations whose primary value is to strengthen communities at the local or regional level, regardless of whether they are formally nonprofit, publicly owned, cooperative, or private.

Three elements distinguish these organizations

Function

They deliver services that sustain cohesion, inclusion, and resilience rather than simply maximize profit.

Scale

Although local or regional in scope, they often serve tens of thousands of residents or hold sensitive datasets on vulnerable populations.

Regulation

Despite their importance, they are rarely included in national designations of critical infrastructure and receive little formal cybersecurity support.

Educational, environmental and local services

Schools, community colleges, special education needs provision, libraries, parks and recreation, municipal or cooperative housing, residents’ associations, town planning, traffic management, employment or job centres, etc.

Cultural and creative organizations

Theatres, museums, dance studios, music groups, youth clubs, allotments, local newspapers and radio stations, arts centres, faith-based community projects, etc.

Health, sport, and care

Sports clubs, gyms, swimming pools, refuges, care homes, crisis helplines, therapy and listening services, adoption services, early years childcare, etc.

Why do we need to protect Critical Community Infrastructure?

CCI is crucial for strong communities, yet its digital security is an afterthought. It is rarely recognized within national or European definitions of critical infrastructure, and so often misses out on the indirect support that comes with regulation. Many CCI organizations have limited staff and budgets, which means they struggle to prioritize cybersecurity alongside their core mission.

In contrast, the cyber threats facing CCI are diverse and growing. They are often deliberately targeted because of their visibility, symbolic value, or access to sensitive data. Compared to regulated sectors, CCI organizations are often easier to compromise and slower to recover, making them appealing targets for both cybercriminals and politically motivated actors

Read more about the cyber threats to CCI in our primer

To address this urgent issue, we have developed a dedicated Cybersecurity Services Centre to provide support that is accessible, affordable, and adapted to the realities of CCI.

How does the Cybersecurity Services Centre work?

The Cybersecurity Services Centre offers a range of services, including raising basic cyber hygiene, conducting phishing simulations, offering staff training, scanning websites for vulnerabilities, improving email and domain security, supporting secure communications, and helping organizations prepare for and respond to incidents.

Thanks to support from Google.org, eligible organizations receive all services for free, along with potential financial support for implementation.

Just as importantly, the Centre acts as a shared resource, serving hundreds of organizations across borders and sectors, and helping to build a stronger community of practice around cybersecurity.

Read the full Terms and Conditions of the Open Call here.

Thank you for signing up to our newsletter!

Thank you! RSVP received for Critical Community

Critical Community

Loading...

Loading…