1.7.6 — Tactical & Secure Communications — maturity: live

Strategic Infrastructure Communications

Providing assured, encrypted satellite communications links to power grids, water systems, pipelines and financial networks so critical infrastructure keeps operating when terrestrial links are severed.

Auto-drafted reference page — content reviewed for shape, individual references not yet link-checked.

Modern critical infrastructure—power grids, water treatment plants, gas pipelines, financial clearing networks, dam controls—runs on SCADA and industrial control systems that assume reliable, low-latency communications. Terrestrial fibre and microwave links are the norm, but they are also single points of catastrophic failure: a flood, an earthquake, a targeted cyberattack, or a precision strike can sever them in minutes. When that happens, operators lose visibility of remote assets and automated safety systems start making decisions without human oversight—a condition that regulators and military planners increasingly classify as a national security emergency.

A dedicated LEO satellite communications layer, operated by the state and separate from commercial internet infrastructure, closes this vulnerability. Each remote infrastructure node—substation, pumping station, pipeline valve cluster, exchange switching centre—carries a small encrypted terminal that maintains a permanent or on-demand uplink regardless of what is happening on the ground beneath it. The satellite layer carries supervisory telemetry, command traffic and emergency voice; it does not replace primary fibre but acts as the break-glass communications path that guarantees continuity. Encryption is end-to-end, key management stays within the sovereign state, and the network topology is not published to any commercial directory.

The operational outcome is that an infrastructure operator retains command-and-control of dispersed assets through any foreseeable disruption scenario—natural disaster, armed conflict or hybrid attack. Grid engineers can isolate a fault, water authorities can maintain safe pressures, and financial regulators can halt a cascade before it reaches systemic thresholds. Because the system is sovereign, it can be kept running even when a nation isolates or degrades commercial satellite services as a coercive measure—the exact scenario that adversaries model when they plan infrastructure pressure campaigns.

What matters

Loss of SCADA communications to a large substation or dam during a crisis is a life-safety event, not merely a service disruption.
Commercial satellite providers have terminated or throttled government services under third-party legal pressure; a sovereign system removes that leverage point.
End-to-end encryption with nationally held keys is the only way to prevent an infrastructure adversary from intercepting control traffic at the space segment.
Regulatory frameworks in the EU (NIS2 Directive) and equivalent national legislation now mandate resilient backup communications for operators of essential services.

Sovereignty score: 9/10 — A state that does not own its critical infrastructure communications layer has handed an adversary—or a commercial provider under foreign jurisdiction—a switch that can silence its grid, water and financial systems on demand.

Foreign-jurisdiction commercial providers can be compelled by court order, sanctions regime or political pressure to terminate or degrade service to a government customer at the worst possible moment.
Critical infrastructure control traffic routed through a third-party satellite network exposes SCADA commands and telemetry to interception at the space segment, ground gateways and network operations centres outside national legal reach.
Export controls on encryption hardware and software (US EAR, UK Export Control Order) create supply-chain dependency that can be weaponised; a sovereign programme procures and certifies cryptographic modules domestically.
During armed conflict or hybrid operations, an adversary may target commercial satellite capacity serving the nation through jamming, spoofing or diplomatic pressure on the operator's home government—a sovereign constellation is not subject to that leverage.

Reference architecture

Payload: Ka-band and UHF dual-band communications payload; Ka-band for high-throughput supervisory data (up to 200 Mbps aggregate per satellite); UHF for resilient low-rate command links (9.6 kbps) that penetrate jamming and foliage; AES-256 / Type-1 equivalent on-board encryption module with national key-load interface
Bus class: ESPA-class microsat, 150–200 kg, 600 W end-of-life power, 5-year design life; modular payload bay to accept cryptographic hardware upgrades on orbit via software-defined radio for the UHF channel
Orbit: LEO sun-synchronous at 550–600 km; 18-satellite walker constellation (3 planes × 6 satellites, 55° inclination) delivering sub-15-minute revisit to any ground terminal above 20° latitude; augmented by 2 inclined-orbit planes for polar infrastructure coverage
Ground segment: Primary mission operations centre co-located with national cyber-security authority; 4 geographically dispersed ground stations (X-band TT&C, Ka-band gateway); fibre-dark inter-site links; air-gapped key management facility meeting national TEMPEST standards; no commercial hosting or cloud uplink
Software & data
Latency
Cost band
Lead time

References

NIS2 Directive — Network and Information Security across the EU — The EU's NIS2 Directive requires operators of essential services—energy, water, transport, finance—to implement resilient communications continuity measures. Member states must enforce these obligations and report major incidents to national competent authorities.
CISA — Satellite Communications (SATCOM) Security Guidance — CISA identifies satellite communications as a critical sub-sector and has issued advisories warning that commercial SATCOM terminals used by critical infrastructure operators are actively targeted by state-sponsored threat actors. Hardened, encrypted backup links are a key mitigation.
ITU-R — Fixed Satellite Service Coordination and Critical Infrastructure — The ITU-R administers spectrum and orbital coordination for fixed satellite services, including dedicated government bands used for infrastructure protection communications. Sovereign frequency filings provide legal priority over commercial operators in designated spectrum.
ENISA — Satellite Infrastructure Threat Landscape Report — ENISA's threat landscape report for space identifies signal jamming, spoofing and supply-chain compromise as primary attack vectors against satellite links serving critical infrastructure. The report recommends sovereign control of encryption and ground-segment architecture as core mitigations.
World Bank — Digital Infrastructure Resilience for Developing Economies — The World Bank highlights that developing nations with limited terrestrial fibre density are disproportionately exposed to infrastructure communications failures during natural disasters. Satellite backup systems are assessed as cost-effective sovereign resilience investments for these markets.