In the recent years, the focus has moved from critical infrastructure protection to that of resilience. But how do we know whether a critical infrastructure is resilient or not, how can it be evaluated, measured and enhanced?