Abstract - Critical digital infrastructure is subject to an expanding set of regulations, directives and standards, with varying levels of maturity and acceptance. Most are voluntary, but more are becoming mandatory. Operators need to prepare to meet these requirements.