The problem of the protection and resilience of CIs is the focus of the work.
The vulnerability and risk analysis framework for this is critically examined.
The complexity of CIs is presented as a challenge for system modeling and analysis.
The integration of different modeling perspectives of analysis is put forward as a solution.
The extension of the analysis framework to new methods for dealing with surprises and black swans is advocated.