A new map of risk

The session was scheduled for two hours and ran for six. On the agenda: a single map on which power stations, undersea cables, hospitals, elections and food depots appear together for the first time — because the threats, the ministers finally admit, never respected the old categories.

The map's innovation is not the data but the company it keeps. Cyber officials sit with civil engineers; border agencies sit with grid operators. The scenario exercises that follow assume failures cascade — and the cascading, everyone agrees, is the point.

Resilience, priced and sequenced

Each risk on the map carries two numbers: the cost of preventing it and the cost of absorbing it. The ratio decides the budget, which is why flood defences beat fighter jets in three separate rows — an outcome that would have been politically impossible before the numbers were shared.

Published, in part

A redacted version goes public next month: the risks without the vulnerabilities, the priorities without the gaps. The ministers call it deterrence through transparency — adversaries and citizens alike can see that the homework has been done, even if they can't see all of it.

The ministers left with homework and, unusually, with shared homework — joint exercises in spring, joint procurement by summer. The map stays on the wall, updated monthly. Risk, mapped together, turns out to be the beginning of resilience rather than the end of it.