Infrastructure & Resilience
Air-Gapped Critical Systems • Cannot Go Dark • 72-Hour Backup
Broadband as Infrastructure • Bridges • Flood Defences • Utilities
No More RAAC Surprises • Inspect Everything • Build to Last
The Principle
Every other charter in the BUILD UK platform assumes the infrastructure works. The water charter assumes the pipes deliver water. The energy charter assumes the grid delivers power. The NHS charter assumes the hospital has electricity. The transport charter assumes the train control centre is operational. The defence charter assumes the communications network is secure.
This charter makes sure those assumptions are correct. It is the foundation beneath every other foundation. If the infrastructure fails, everything built on top of it fails. A hospital without power is a building full of dying people. A train network without a control centre is 40,000 tonnes of metal moving uncontrolled at 125mph. A water treatment plant without its control system is raw sewage flowing into the supply. A power grid without its management system is a national blackout.
The current approach to critical infrastructure resilience in Britain is hope. Hope that the systems will not fail. Hope that the backup will work. Hope that nobody targets the control system. Hope that the bridge does not collapse. Hope that the concrete is not rotting from the inside. BUILD does not hope. BUILD engineers.
If people die when it fails, it does not go dark. It does not connect to the internet. It does not run on hope. It runs on redundancy, backup, air gaps, and the absolute certainty that when the main system fails, the backup system works because it was tested last Tuesday.
Pillar 1: Air-Gapped Critical Systems
If the system controls something that people die when it fails, it does not touch the internet. Not through a firewall. Not through a VPN. Not through a ‘secured connection.’ No connection. Air. Physical separation.
1.1 — The Rule
All critical infrastructure control systems must be air-gapped — physically disconnected from the internet, from the corporate network, and from any other system that has internet access. An air gap means there is no cable, no wireless connection, no Bluetooth, no USB bridge, and no shared hardware between the control system and any internet-connected device. The only way to access the control system is to be physically present at the control terminal.
This applies to: power grid control systems (SCADA, energy management systems); water treatment and distribution control systems; railway signalling and train control systems; air traffic control systems; nuclear plant operational systems; hospital critical systems (life support, surgical equipment, pharmacy dispensing); emergency services dispatch (999/112); telecommunications core network management; and any other system whose failure would cause immediate risk to life.
1.2 — No Exceptions
Companies will argue that air-gapping is inconvenient, expensive, and unnecessary because their firewall is adequate. Their firewall is not adequate. The Ukrainian power grid had a firewall; in 2015 attackers went through it and switched off power to 230,000 people. Colonial Pipeline shut down America’s biggest fuel pipeline after ransomware hit only its office network — because nobody could be sure the control systems were separate. Firewalls are software. Software has vulnerabilities. An air gap, properly policed, is the strongest barrier there is.
The argument that remote monitoring requires internet connectivity is rejected. Remote monitoring of critical systems is itself a vulnerability. If you can monitor it remotely, an attacker can access it remotely. The monitoring happens on site, by qualified personnel, physically present at the facility. If the facility requires 24/7 monitoring, it is staffed 24/7.
1.3 — The Enforcement
Any operator of critical infrastructure that refuses to air-gap its control systems has two options: air-gap the critical systems and maintain internet access for administrative functions on a physically separate network; or lose internet access entirely at the facility. Those are the only two options. There is no third option where the control system stays connected and the operator promises to be careful.
Compliance inspections will be conducted by the UK Cyber Defence Command (Defence Charter, Pillar 8.1) on an unannounced basis. Inspectors have the authority to physically verify the air gap — tracing every cable, scanning for wireless signals, and testing for any connection between the control network and any external network. Non-compliance results in an immediate enforcement notice and, if not rectified within 72 hours, facility closure until the air gap is verified.
Pillar 2: Cannot Go Dark
2.1 — 72-Hour Backup Power
Every critical infrastructure facility must have backup power capable of sustaining full operations for a minimum of 72 hours without mains supply. This means diesel generators with 72 hours of fuel on site, plus battery or UPS systems to cover the switchover period (typically 10–30 seconds for a generator to reach full output). The backup is tested under load every month. Not started and checked. Tested under full operational load to verify it can actually power the facility.
72 hours is the minimum time required for the grid to restore power following a major failure, for fuel resupply to reach the facility, or for emergency measures to be implemented. A hospital whose backup generators fail to start — as Forth Valley Royal’s did in Storm Éowyn in 2025, leaving ventilated patients on battery power — has failed the most basic test of infrastructure resilience. Under BUILD, that does not happen. Hospitals keep the NHS’s existing standard of around 200 hours of fuel; 72 hours is the floor for everything else.
2.2 — Dual Redundancy
All critical control systems must have dual redundancy: two independent systems capable of performing the same function, operating on separate hardware, separate power supplies, and separate physical locations where practical. If System A fails, System B takes over automatically, without human intervention, within seconds. This is standard practice in aviation and military systems. It is not standard practice in the water, power, and railway systems that nearly 70 million people depend on daily. BUILD will make it standard.
2.3 — What Cannot Go Dark
The following systems are designated Cannot Go Dark under this charter. They must maintain continuous operation under all circumstances, including mains power failure, cyberattack, physical damage, and natural disaster: power grid control centres; water treatment and pumping stations; railway signalling and control centres; hospital power and critical medical systems; emergency services dispatch centres (999/112); air traffic control; nuclear plant safety systems; telecommunications core switches and internet exchange points; and flood defence pumping stations and barrier controls.
If a system is on the Cannot Go Dark list, it has 72-hour backup, dual redundancy, air-gapped controls, and a tested failover plan. No exceptions. No deferrals. No ‘planned for the next financial year.’ Now.
Pillar 3: Bridges, Tunnels, and Structures
3.1 — No More RAAC Surprises
Reinforced Autoclaved Aerated Concrete — RAAC — was used in thousands of buildings from the 1950s to the 1990s, including schools, hospitals, and public buildings. It has a design life of approximately 30 years. Many RAAC structures are now 50–70 years old. They are failing. Panels crack, sag, and in some cases collapse without warning. A RAAC school roof collapsed in Kent in 2018. Engineers warned the government in 2019. In 2023, days before term, it still did not know which schools contained it — and more than a hundred were told to shut. This is not infrastructure management. It is negligence.
BUILD will commission a full structural audit of every public building, bridge, tunnel, car park, hospital, school, and critical structure in England. Every structure is inspected. Every material is identified. Every defect is catalogued. Every remediation is scheduled and funded. No more discovering in September that the school roof might collapse in October.
3.2 — Bridge Inspection Regime
Every road bridge, rail bridge, footbridge, and viaduct in England will receive a hands-on principal inspection at least every five years — no more stretching it to twelve on a desk risk assessment — with high-risk structures inspected annually. The inspection is structural, not visual — qualified engineers examine the fabric, test the materials, and assess the load capacity. The current system, where a principal inspection can be deferred for up to twelve years and the two-yearly check is visual, is not good enough.
3.3 — Flood Defences
All flood defence infrastructure — barriers, walls, pumping stations, drainage systems — will be inspected annually and maintained to operational standard at all times. Flood defence pumping stations are on the Cannot Go Dark list (Pillar 2.3). The Environment Agency’s replacement body under BUILD’s reforms will maintain a real-time operational status dashboard for every flood defence asset in the country. When a flood warning is issued, every asset in the affected area must be confirmed operational before the water arrives, not discovered to be broken when it is too late.
Pillar 4: Underground Utilities
4.1 — National Utilities Map
The National Underground Asset Register already maps more than 80% of what lies beneath our streets. BUILD will finish the job: every pipe, cable, duct and conduit on it, to sub-metre accuracy, with a legal duty on every utility to record new and repaired assets within days — and fines when they don’t. Gas, water, electricity, telecoms, sewage, drainage — all mapped to sub-metre accuracy and available to every contractor, utility company, and local authority before any excavation begins.
Contractors still hit mains tens of thousands of times a year because the map is incomplete or wrong. A contractor digs a trench and hits a gas main because the map said it was two metres to the left. These strikes cause gas leaks, water mains bursts, power outages, and occasionally explosions. A complete national utilities map, maintained in real time, solves a problem that has existed since the first pipe was laid underground.
Pillar 5: Broadband as Critical Infrastructure
5.1 — Minimum Speed Guarantee
Broadband is critical infrastructure. It is as essential to modern life as water, electricity, and roads. BUILD will guarantee a minimum broadband speed of 100Mbps to every premises in England — urban, suburban, and rural. The current model, where four in ten rural homes still cannot get full fibre and tens of thousands cannot even get 10Mbps, while urban areas get gigabit, is a digital divide that excludes millions of people from working, learning, and participating in modern society.
This connects to the right to offline (Life, Liberty & Freedom Charter, Pillar 2.2) — nobody should be forced to use the internet. But those who choose to should not be punished for where they live. A farmer in Yalding deserves the same internet speed as a consultant in Canary Wharf.
5.2 — British Internet Exchange Sovereignty
The UK’s internet exchange points — LINX in London, IXManchester, and others — are critical national infrastructure where Britain’s networks meet and exchange traffic. These facilities are on the Cannot Go Dark list (Pillar 2.3). They will be designated as sovereign infrastructure with the same protection status as power grid control centres. No foreign ownership. No offshore management. Air-gapped administrative systems. 72-hour backup. Dual redundancy.
5.3 — Public Ownership
Broadband joins water and energy in public ownership. The national network — the fibre, the copper and the ducts it runs through — is brought into public ownership and run at cost, as a utility, like the water main and the power line. Nobody should own the only road to the internet in a village and charge rent on it.
Pillar 6: Wind Turbines and Wildlife
Offshore and onshore wind turbines kill an estimated 10,000–100,000 birds per year in the UK. Raptors, seabirds, and migrating species are disproportionately affected. The Wildlife & Rewilding Charter commits to recovering these populations. The Energy Charter commits to offshore wind as a supplementary power source. This pillar ensures the two do not conflict.
6.1 — Minimum Standards for New Installations
All new wind turbine installations in the UK must incorporate at least one of the following wildlife protection measures: shrouded or ducted turbine design that encloses the blades, preventing bird contact; bladeless turbine technology (oscillating cylinder designs that generate electricity from vibration with zero bird strike risk); or as a minimum standard where shrouded or bladeless designs are not feasible, painted blade markings (one blade painted black) which reduce bird mortality by up to 70% by making the rotation visible.
6.2 — Retrofit Existing Installations
Existing wind turbines will be retrofitted with painted blade markings within two years. This is the cheapest and fastest intervention available. One blade painted. Up to 70% fewer bird deaths in the Norwegian trial that tested it. The cost is negligible. The delay is inexcusable. As turbines reach end of life and are replaced, the replacements must meet the full standard (shrouded, bladeless, or painted).
6.3 — Migration Corridor Shutdowns
Wind farms located on known bird migration corridors will be required to shut down during peak migration periods. The lost generation during shutdown is minimal compared to the total annual output, and the birds that survive the crossing go on to breed. This is a temporary, predictable, scheduled interruption — not an operational failure. The grid plans for it the same way it plans for scheduled maintenance.
If people die when it fails, it does not go dark. It does not connect to the internet. It does not run on hope. BUILD’s infrastructure runs on air gaps, backup power, tested failover, and the absolute certainty that when the question is ‘what happens if this breaks,’ the answer is ‘the backup takes over and nobody notices.’
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
BUILD UK
builduk.club
August 2026
Download this charter as a document (.docx) — the paper as written. What follows is the same text, readable.