The paper presents a framework methodology and process for planning and developing capabilities and measures for protection of critical infrastructure and presents major methodological and organizational challenges of effective and efficient protection. The authors emphasize the need for comprehensive approach, based on much better communication and greater coordination among governmental organizations, security services, owners and operators of critical infrastructure.