In energy and cybersecurity: the information process and Information Communications Technology that form part of the operation of the Critical Infrastructure (CI) (NCSP 2023-2028)[.] In the energy sector, CII includes both the Information Technology (IT) and Operational Technology (OT) systems and assets, both physical and digital, that are essential for the reliable and secure operation of the energy supply and services, including power, oil and gas, and the utilization sector [Section 3(e), DOE Department Circular No. DC2025-01-001, Institutionalizing the Energy Sector Cybersecurity and Cyber Resilience Framework]
In energy and cybersecurity, in government: the computer systems and/or networks, whether physical or virtual, and/or the computer programs, computer data, and/or traffic data that are vital to this country that the incapacity, destruction, or interference with such system and assets would have a debilitating impact on security, national or economic security, national health and safety, or any combination of those matters. Sectors initially classified as CIIs are the following: government transportation (land, sea, air), energy, water, health, emergency services, public finance, banking and finance, business process outsourcing, telecommunications, space, and media [Section 5(d), E-Governance Act of 2025]
Note: Section 5(h) of the 2026 Implementing Rules and Regulations of the E-Governance Act rephrases the last sentence as: “Government sectors initially classified as CIIs are the following: transportation (land, sea, air), energy, water, health, emergency services, public finance, banking and finance, business process outsourcing, telecommunications, space, and media