Infrastructure Doesn't Do Borders

National resilience plans draw a tidy line at the border and assume critical systems stop there. Fiber and power grids never got that memo, and neither does money.

Every few years some ministry publishes a national critical infrastructure resilience plan, complete with a map of the power grid and the telecom backbone, both ending in a tidy color-coded line right at the border. Nice document. None of the systems on it actually stop where the color does.

Fiber doesn't carry a passport. Electrons don't queue at customs. A wire transfer has no idea which flag flies over the building it just settled through. The paperwork keeps pretending otherwise anyway, one tabletop exercise at a time, as if a country's critical systems were a walled garden rather than a set of pipes several neighbors share, usually without noticing.

The wiring doesn't know it's foreign

Start with data. A routine phone call between two cities in the same country, a hospital's nightly backup, a stock order placed by someone who has never left home: any of it can leave the country for a few milliseconds without a soul involved knowing. Internet peering runs on price and distance, not sovereignty. If the cheapest or shortest path to an exchange point happens to sit one border over, traffic takes it, bounces through a rack in someone else's jurisdiction, and comes home looking perfectly domestic.

Which means a fiber cut, a new licensing fight, or a sudden data-localization law two countries away can quietly degrade a connection both endpoints would swear is purely internal. Network engineers have known this for decades. People who draft resilience plans tend to find out mid-incident.

Power grids make the same point with higher stakes. Large synchronous zones tie the frequency of dozens of countries together in real time. Trip a big enough plant in one place and the whole zone feels it within seconds: automatic defenses fire somewhere else, and a grid operator two countries away sheds load for a fault they had no hand in and no vote on. You sign up for that with interconnection, along with shared reserves, cheaper balancing, fewer blackouts on average, and the occasional imported emergency wearing someone else's fingerprints.

Money runs the same risk through less visible pipes. Most cross-border payments still pass through correspondent banks and settlement systems clustered in a handful of hub jurisdictions, regardless of where the payer or payee banks. Tighten a sanctions list or freeze a settlement rail in one of those hubs, and payments in a dozen unconnected countries slow down or bounce, even though not one of them touched its own rules. The disruption shows up wearing a foreign policy decision and a familiar currency symbol.

Security plans for a network with no doors

National security thinking is still mostly organized around jurisdiction: a ministry, an agency, a mandate that ends where the customs post starts. That made sense back when infrastructure roughly matched the map. It stopped matching decades ago, and the gap widens every time someone lays a new subsea cable, signs a new interconnection agreement, or adds another correspondent bank to a payment corridor.

A licensing change aimed at a purely domestic telecom market can starve bandwidth in a neighboring one, if that neighbor's cheapest transit happens to run through the country making the change. An energy policy meant to shore up one grid's reserve margin can export instability to the grid next door the moment a shared interconnector gets stressed. None of this shows up in a tabletop exercise built around a map with one clean line around one country, because the line isn't real. The wiring never agreed to respect it.

None of this means scrapping national plans, someone still has to own the substation and answer the phone when it trips. Plans should just admit that a substation's frequency is a shared resource, and that the clearing house on the other side of a routine payment answers to somebody else's regulator right up until, without warning, it answers to yours too.

Maybe the next resilience plan should skip the map entirely and add one honest line at the bottom: in an emergency, call the neighbors first. You've been sharing a wall with them the whole time.