Protection of Critical Infrastructure in Bangladesh

Introduction

Critical Infrastructure (CI) refers to the physical and cyber systems, assets, facilities, and networks essential for the functioning of a country’s economy, security, governance, public health, and safety. In Bangladesh, critical infrastructure includes:

• Power plants and electricity grids
• Telecommunications and internet systems
• Banking and financial institutions
• Transportation systems (ports, railways, airports)
• Water supply and sanitation systems
• Oil and gas facilities
• Government digital databases
• Healthcare infrastructure
• Military and defense establishments

The protection of critical infrastructure has become increasingly important in Bangladesh because of:

• Rapid digitization
• Growing cyber threats
• Terrorism and sabotage risks
• Climate-related disasters
• Dependence on interconnected technologies

Bangladesh has adopted legal, institutional, and policy mechanisms to safeguard these infrastructures from physical and cyber threats.

Legal Framework for Protection of Critical Infrastructure in Bangladesh

1. Constitution of Bangladesh

The Constitution imposes duties upon the State to ensure:

• Public safety
• National security
• Protection of public property
• Rule of law

Although the Constitution does not explicitly use the term “critical infrastructure,” constitutional obligations form the foundation for infrastructure protection policies.

2. Information and Communication Technology (ICT) Act, 2006

The ICT Act was one of the earliest laws dealing with cybercrime and protection of digital systems.

Key Features

• Criminalizes hacking and unauthorized access
• Protects electronic systems and databases
• Punishes cyber sabotage and destruction of data
• Enables investigation of cyber offences

Importance for Critical Infrastructure

Banks, telecom companies, and government networks rely on this law against cyberattacks.

3. Digital Security Act, 2018

The Digital Security Act (DSA) is a major legislation addressing cyber threats to national systems.

Important Provisions

• Protection of Critical Information Infrastructure (CII)
• Criminalization of cyber terrorism
• Punishment for unauthorized access to protected systems
• Powers for digital forensic investigation

Critical Information Infrastructure

The government may declare any digital system as “Critical Information Infrastructure.”

Examples include:

• Bangladesh Bank systems
• National Data Centers
• Government cloud services
• Telecom switching systems

Unauthorized access to such systems is treated as a serious offence.

4. Bangladesh Telecommunication Regulation Act, 2001

This law regulates telecommunication networks and infrastructure.

Protective Measures

• Licensing and security obligations
• Government authority during emergencies
• Monitoring of telecom operations
• Protection against illegal interception

Telecommunication infrastructure is considered essential to national security.

5. Cyber Security Act, 2023

The Cyber Security Act replaced parts of the Digital Security Act.

Objectives

• Strengthening cybersecurity governance
• Protecting state digital infrastructure
• Combating cyber warfare and cyber terrorism
• Ensuring resilience of digital services

Significance

The Act specifically focuses on:

• Cyber incidents affecting essential services
• Data breaches in national systems
• National cybersecurity coordination

6. Disaster Management Act, 2012

Bangladesh is highly vulnerable to:

• Floods
• Cyclones
• River erosion
• Climate disasters

Critical infrastructure protection includes disaster preparedness and resilience planning.

Key Measures

• Emergency response coordination
• Protection of public utilities
• Risk reduction planning
• Infrastructure recovery systems

Institutional Framework

1. National Cyber Security Agency

Responsible for:

• Cyber threat monitoring
• Protection of government networks
• Incident response
• Cybersecurity policy implementation

2. Bangladesh Computer Council (BCC)

The BCC works on:

• National cybersecurity strategy
• Digital infrastructure development
• Security awareness programs

3. Bangladesh Telecommunication Regulatory Commission (BTRC)

BTRC regulates:

• Telecom infrastructure security
• Internet service providers
• Emergency communications

4. Armed Forces Division

The military assists in:

• Protection of strategic installations
• Disaster response
• Counter-terrorism operations

Types of Threats to Critical Infrastructure in Bangladesh

1. Cyber Attacks

Examples:

• Malware attacks
• Ransomware
• Banking fraud
• Data theft
• Distributed Denial of Service (DDoS) attacks

Bangladesh Bank’s SWIFT cyber heist is one of the most significant examples.

2. Terrorism and Sabotage

Militant groups may target:

• Power stations
• Airports
• Government offices
• Transportation systems

Protection requires intelligence coordination and physical security.

3. Natural Disasters

Cyclones and floods can damage:

• Electricity systems
• Bridges
• Communication networks
• Water infrastructure

Bangladesh therefore emphasizes climate-resilient infrastructure.

4. Insider Threats

Employees with access to sensitive systems may:

• Leak data
• Commit fraud
• Disable systems

This risk is significant in banking and telecom sectors.

Government Strategies for Infrastructure Protection

1. National Cyber Security Strategy

Bangladesh adopted policies for:

• Cyber resilience
• Protection of digital assets
• Public-private coordination
• Security standards

2. Smart Bangladesh Vision 2041

The government’s digital transformation agenda includes:

• Secure digital governance
• Resilient infrastructure
• AI and data security systems

3. Public-Private Cooperation

Banks, telecom operators, and energy companies cooperate with the government on:

• Threat intelligence
• Emergency response
• Infrastructure audits

Major Challenges

1. Limited Technical Capacity

Bangladesh still faces shortages of:

• Cybersecurity experts
• Digital forensic specialists
• Advanced security systems

2. Legal Enforcement Problems

Challenges include:

• Slow investigations
• Cross-border cybercrime
• Lack of technical evidence

3. Dependence on Foreign Technology

Many critical systems rely on imported:

• Software
• Hardware
• Cloud systems

This creates supply-chain security risks.

4. Climate Vulnerability

Frequent natural disasters threaten:

• Coastal power plants
• Transportation networks
• Telecommunications

Important Case Laws Related to Protection of Critical Infrastructure in Bangladesh

1. Bangladesh Bank Cyber Heist Case (2016)

Facts

Hackers infiltrated the Bangladesh Bank’s SWIFT system and attempted to steal nearly USD 1 billion. About USD 81 million was successfully transferred to accounts in the Philippines.

Legal Issues

• Cybersecurity negligence
• Protection of banking infrastructure
• International cybercrime
• Liability of financial institutions

Importance

This case exposed vulnerabilities in Bangladesh’s financial critical infrastructure and led to major cybersecurity reforms in banking systems.

2. BLAST v. Bangladesh and Others

Facts

The case involved public safety obligations and state responsibility concerning governance and protection of citizens.

Legal Principle

The government has constitutional duties to protect public welfare and essential systems.

Importance

The judgment reinforced the doctrine that state authorities must actively safeguard public infrastructure and citizen security.

3. Secretary, Ministry of Finance v. Masdar Hossain (Masdar Hossain Case)

Facts

The case primarily concerned judicial independence but emphasized institutional integrity and constitutional governance.

Legal Principle

Strong institutions are essential for national stability and lawful administration.

Importance for Infrastructure Protection

Protection of critical infrastructure requires independent and effective institutions capable of enforcing security laws.

4. Dr. Mohiuddin Farooque v. Bangladesh (Flood Action Plan Case)

Facts

The legality of government development activities affecting environmental safety was challenged.

Legal Principle

Environmental protection and sustainable planning are linked to public safety.

Importance

The case established that infrastructure projects must consider disaster resilience and environmental impacts.

5. Bangladesh Environmental Lawyers Association (BELA) v. Bangladesh

Facts

Environmental risks caused by industrial and infrastructure projects were challenged before the court.

Legal Principle

The State must protect public resources and ecological systems.

Importance

Critical infrastructure planning must comply with environmental and safety standards to prevent large-scale public harm.

6. Metropolitan Chamber of Commerce and Industry v. Bangladesh

Facts

The case involved regulatory and governance issues affecting economic operations.

Legal Principle

Economic infrastructure must be protected through lawful regulation and administrative accountability.

Importance

The decision highlighted the role of governance in securing national economic infrastructure.

Comparative Perspective

Compared with many developing countries, Bangladesh has made significant progress in digital governance and cybersecurity legislation. However, countries such as:

• Singapore
• India
• Estonia
• United States

have more advanced:

• Cyber defense systems
• National CERT structures
• Infrastructure resilience standards

Bangladesh is gradually moving toward stronger institutional coordination and technological preparedness.

Recommendations

1. Strengthening Cybersecurity Capacity

• Train cybersecurity professionals
• Establish advanced cyber labs
• Improve digital forensic systems

2. Updating Legal Frameworks

• Harmonize cyber laws with international standards
• Improve data protection legislation
• Enhance cross-border cooperation

3. Infrastructure Resilience

• Build disaster-resistant infrastructure
• Protect coastal facilities
• Develop backup communication systems

4. Public Awareness

• Promote cybersecurity awareness
• Train government employees
• Encourage reporting of cyber incidents

5. Public-Private Partnership

Private operators of:

• Banks
• Telecom networks
• Energy facilities

should collaborate closely with national security agencies.

Conclusion

Protection of critical infrastructure in Bangladesh is essential for national security, economic stability, and public safety. As the country becomes increasingly dependent on digital systems and interconnected technologies, threats from cyberattacks, terrorism, and natural disasters continue to grow.

Bangladesh has developed an important legal and institutional framework through the ICT Act, Digital Security Act, Cyber Security Act, Disaster Management Act, and telecom regulations. Judicial decisions and major incidents such as the Bangladesh Bank cyber heist have further emphasized the necessity of strong infrastructure protection mechanisms.

Despite challenges such as limited technical expertise, climate vulnerability, and enforcement weaknesses, Bangladesh is progressing toward a more resilient and secure infrastructure system through cybersecurity reforms, institutional strengthening, and strategic national planning.