Natural hazards and malicious attacks against critical infrastructure systems pose grave risks to societies and economies. Recent shock events – such as the COVID-19 pandemic, Ukraine power grid cyberattack or volcanic ash cloud over Europe – illustrate how disruptions to critical infrastructure can result in cascade effects that cause substantial economic damage as well as loss of life. As the interconnectedness of supply chains and technological systems in the global economy increases, so does the vulnerability of critical infrastructure systems (e.g. those that produce and deliver electricity, gas, water and telecommunications) to shock events (OECD, 2019).