Key findings
Twelve findings carry the lifeline systems baseline. They are grouped by coupling and never ranked. Each resolves to its source or, where Nexus analysis is involved, to its stated method.
Contents
- ·Edition home
- ·Executive summary
- 1Lifelines fail together
- 2Key findings
- 3Systems and sectors at baseline
- 4Risks and capability
- 5Power loss that overlaps a telecom or cloud failure
- 6Readings from the other desks
- 7The 2027 agenda
- 8Systems in depth
- AMethodology
- BData appendix
- CReferences and record
- ·Complete edition, for print
2.1Headline finding
ReportedEQL 4NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-INF-006
Subsea cable faults averaged 199 a year from 2010 to 2023. About two thirds came from fishing and transport vessels, and intent is hard to establish.
| Item | Bar, scaled to the largest value | Value |
|---|---|---|
| Average faults a year | 199 | |
| of which external aggression (about two thirds) | ≈133 |
Source: TeleGeography7. The second bar is a Nexus derivation, method (4), and is approximate.
Implication
Most faults are accidents, so route diversity and repair capacity matter more than detecting intent. Governments around the Baltic investigate each fault as potential sabotage, and the analyst notes that severing a few cables is noise rather than a signal7.
What would move it
Repair-vessel investment, route diversity and the outcome of Baltic investigations would each move this finding.
2.2Infrastructure
ReportedEQL 4NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-INF-001
The Iberian blackout of 28 April 2025 came from interacting factors, including voltage control gaps, oscillations and generator disconnections, according to the ENTSO-E final report of 20 March 2026.1
ReportedEQL 3NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-INF-005
The 2025 US report card grades national infrastructure C, with a USD 3.6 trillion ten-year investment gap and energy at D+.6
ReportedEQL 4NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-INF-006
Subsea cable faults averaged 199 a year from 2010 to 2023; about two thirds came from fishing and transport vessels, and intent is hard to establish.7
2.3CYB
ReportedEQL 4NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-CYB-002
Agencies assessed in February 2024 that state-sponsored actors were pre-positioning on networks in communications, energy, transportation and water sectors, with some intrusions lasting at least five years.2
ReportedEQL 3NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-CYB-003
ENISA analysed 4,875 incidents between 1 July 2024 and 30 June 2025 for the EU threat landscape.3
2.4Data and digital
ReportedEQL 4NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-DAT-004
A single software update affected an estimated 8.5 million Windows devices on 18 July 2024.4
2.5Climate forcing
ReportedEQL 3NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-CLI-007
UNDRR puts the annual average loss to critical infrastructure from floods, tropical cyclones and earthquakes at more than USD 250 billion.10
2.6Development
ReportedEQL 3NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-DEV-008
Disruptions to power, transport, telecommunications and water cost households and firms in low- and middle-income countries at least USD 390 billion a year, and resilient options return about USD 4 per USD 1.11
2.7CON
ReportedEQL 3NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-CON-009
Ukraine’s ten-year recovery and reconstruction needs are USD 587.7 billion, with energy at about USD 91 billion, and direct damage to energy and extractives reached USD 24.8 billion by the end of 2025.12
ReportedEQL 2NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-CON-010
Power and desalination plants in Kuwait, Bahrain and the United Arab Emirates were reported struck from March 2026, in a region where desalination supplies most drinking water.13
2.8AIC
ReportedEQL 4NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-AIC-011
Data centres made up half of US electricity demand growth in 2025, and nearly half of US data-centre capacity sits in five regional clusters.98
2.9Systemic
Expert inputEQL 2NRF-STRATEGIC-LIFELINES-GLOBAL-2026-BASELINE-SYS-012
The leading compound pathway for 2027 testing is a power loss that overlaps a telecom or cloud failure and limited repair capacity. § scenario
Notes
Numbers are the edition’s reference numbers, so a note reads the same in every chapter. The full list, with every source and its licence, is in Annex C. Annex C, references
- 7TeleGeography (ed.), Is it sabotage? Unraveling the mystery of undersea cable breaks (analysis of 199 faults a year, 2010 to 2023). TeleGeography, Washington. Observation year 2024. Accessed 2026-11-03.back
- 1ENTSO-E (ed.), 28 April 2025 Iberian blackout: final report of the expert panel (publication page; report dated 20 March 2026). ENTSO-E, Brussels. Observation year 2025. Accessed 2026-11-03.back
- 6ASCE (ed.), 2025 Report Card for America’s Infrastructure (overall grade C; ten-year investment gap USD 3.6 trillion; sector grades). American Society of Civil Engineers, Reston. Observation year 2025. Accessed 2026-11-03.back
- 2CISA, NSA, FBI and partner agencies (eds.), PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure (Volt Typhoon), joint cybersecurity advisory AA24-038A, 7 February 2024. CISA, Arlington. Observation year 2024. Accessed 2026-11-03.back
- 3ENISA (ed.), ENISA Threat Landscape 2025 (publication page; period 1 July 2024 to 30 June 2025; published 1 October 2025; version 1.3 of 22 September 2026). European Union Agency for Cybersecurity, Athens. Observation year 2025. Accessed 2026-11-03.back
- 4Microsoft (ed.), Helping our customers through the CrowdStrike outage (blog post of 20 July 2024; estimate of 8.5 million Windows devices). Microsoft, Redmond. Observation year 2024. Accessed 2026-11-03.back
- 10UNVERIFIED, not opened: UNDRR (ed.), Global Assessment Report on Disaster Risk Reduction 2025: Resilience Pays (annual average loss to critical infrastructure above USD 250 billion for floods, tropical cyclones and earthquakes; about USD 2.3 trillion total annual disaster cost), taken from search-result summaries; the report page returned an access error. United Nations Office for Disaster Risk Reduction, Geneva. Observation year 2025. Accessed 2026-11-03.back
- 11UNVERIFIED, not opened: Hallegatte, S., Rentschler, J. and Rozenberg, J., Lifelines: The Resilient Infrastructure Opportunity (disruptions cost at least USD 390 billion a year in low- and middle-income countries; USD 4.2 trillion net benefit; about USD 4 per USD 1), taken from search-result summaries; the repository returned an access error. World Bank and GFDRR, Washington, 2019. Observation year 2019. Accessed 2026-11-03.back
- 12UNVERIFIED, not opened: World Bank, United Nations and European Commission (eds.), Ukraine Fifth Rapid Damage and Needs Assessment (RDNA5), released 23 February 2026 (needs USD 587.7 billion over ten years; energy about USD 91 billion; direct damage to energy and extractives USD 24.8 billion to end 2025), taken from search-result summaries. Observation year 2025. Accessed 2026-11-03.back
- 13UNVERIFIED, not opened: press and think-tank reports on strikes on power and desalination plants in Kuwait, Bahrain and the United Arab Emirates, March to July 2026 (including The National, Arab News and the Arab Center Washington DC), taken from search-result summaries; no official damage assessment was found. Observation year 2026. Accessed 2026-11-03.back
- 9IEA (ed.), Global Energy Review 2026 (revised version, May 2026). International Energy Agency, Paris. Observation year 2025. Accessed 2026-11-03.back
- 8IEA (ed.), Energy and AI (World Energy Outlook Special Report). International Energy Agency, Paris, April 2025. Observation year 2024. Accessed 2026-11-03.back
