Protection
Population warning and preparedness
National public-warning systems, their use during airspace incursions, and published household preparedness guidance.
Coverage · NATO Eastern Flank
Civil Resilience, not a humanitarian emergency. Flank states' civilian systems are functioning; what this measures is how far collective defence depends on them, and how prepared they are.
AssessmentModerate confidence
Broad regional level only. This surface never maps aid routes, facility locations or operational detail. Nothing in this layer is an assessment of whether a state is prepared. The objects record what is publicly established about systems, responsibilities and programmes, with their dates; where a condition is not publicly established, the object says so rather than estimating it.
Current state
Where the civilian systems stand
Moderate confidence · Data as of 2026-09-22
Almost nothing in this module's military layer works without a civilian one. Reinforcement moves on commercial railways and through commercial ports; the electricity and data links between allies are owned by operators; warning reaches populations through national systems no alliance commands; and the sabotage, arson and interference recorded here are handled by police and prosecutors rather than by armed forces. NATO's own founding text makes this explicit — Article 3 commits members to maintain and develop their individual and collective capacity to resist armed attack, and the Alliance treats civil preparedness as a critical enabler of collective defence. This layer records the condition of those civilian systems at system level, and refuses every detail that would describe how to attack them.
- Article 3 basisIn force since 1949As of 2026-09High confidenceThe treaty clause NATO names as the root of resilience and civil preparedness
- Flank states hosting a NATO formation9As of 2026-06High confidenceEach host state provides the civilian support that a foreign formation on its territory needs
- Cross-border links damaged since 202215 assets on 9 daysAs of 2026-09Moderate confidenceConfirmed physical damage to named Baltic cables and pipelines; attribution is a separate question and none has reached a state
- Allies named in the Council's hybrid statement7As of 2024-05High confidenceThe alliance's own count of members affected by Russian hybrid activity when it made the finding
The civilian systems, as analytical objects The 7 systems this module publishes on NATO Eastern Flank, as selectable objects. Each carries its present condition where the module states one, its own figures, the module's analysis of it and — where the corpus establishes one — the mechanism by which security conditions reach it.Interrogate NATO Eastern Flank in Explore
Protection
Civilian exposure to hybrid pressure
Arson, devices in transit networks, railway sabotage and interference with electoral and information systems, and the civil institutions that answer them.
Health & services
Health and emergency continuity
The continuity of essential health and emergency services under collective-defence pressure — a family NATO names and the public evidence does not reach.
Civilian infrastructure
Energy continuity
The electricity and gas links the flank runs on, their exposure to damage, and the residual dependence of two members on Russian supply.
Civilian infrastructure
Communications and undersea connectivity
Submarine telecommunications between the Baltic states, Finland and Sweden, and what repeated damage to them has meant for users.
Supply access
Transport and civilian host-nation support
The civilian transport and regulatory systems that reinforcement depends on, and the arrangements under which a host state receives foreign forces.
Civil resilience
The institutional basis of resilience
Article 3, NATO's civil-preparedness framing, and the division of responsibility between the Alliance and its members.
How the systems rest on each other The dependencies this module states between its own systems. A relationship, not a consequence — what a disruption would actually do is an impact chain, and only where the corpus establishes one.
Population warning and preparednessSystems exist and have been used
Communications and undersea connectivityFunctioning, repeatedly interrupted
rests onEnergy continuity
Transport and civilian host-nation supportBeing rebuilt; main-line date moved to 2028–2034
rests onEnergy continuity
An edge says one system rests on another. It is not a failure cascade: it carries no magnitude, no sequence and no timing, and nothing here says what happens when a system is disrupted. Where the corpus establishes that, it is an impact chain with its own stages and its own per-step basis grades, linked from the system itself.
The systems in full7 blocks of analysis and 4 dated figures, filed under the systems above — the module’s own words, with their own vintages
Everything below is authored on this module’s civil resilience record. Figures carry the vintage of the release that produced them, not the date of this page: the section is graded Moderate confidence and its data is stated as of 2026-09-22.
Population warning and preparednessProtection
Current conditionSystems exist and have been usedAs of 2026-09
Alerts have been issued during drone entries and airspace has been closed. Whether any population is adequately prepared is not assessed here and is not established by any source read.
National public-warning systems, their use during airspace incursions, and published household preparedness guidance.
Assessed as of 2026-09never reviewed as an object
How conditions reach this
Airspace pressure and shared civil systems
Drone and aircraft incursions and satellite-navigation interference fall on airspace that military and civil aviation share, so pressure aimed at an alliance lands on civilian operations that cannot route around it.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
Dependencies
Resilience measures — announced kept apart from in place and tested
- Tested or used · Warning and public guidance · as of 2026-09National public-warning systemsUsed during airspace incursions — Romania issued mobile alerts during drone entries. Activation is recorded; adequacy is not assessed.Romania · Finland · Sources: Official government statements
- In place · Warning and public guidance · as of 2026-09Household civil-preparedness guidanceSeveral flank states have published guidance to households since 2022. Sources: Official government statements
What would change this
- Activation of national public-warning systemsAlerts issued during airspace incursions are published by the states that issue them. Their use is an observable of both the pressure and the preparedness.
Population warning and preparedness
As of 2026-09
Flank states operate national public-warning systems and have used them during airspace incursions: Romania issued mobile alerts during drone entries, and Finland closed airspace during one case. Several states have published civil-preparedness guidance to households since 2022. This layer records that such systems exist and have been activated. It publishes no shelter location, capacity, stockpile site or evacuation arrangement, and no assessment of whether any population is adequately prepared.
Sources: Official government statements
What this does not establish
- No shelter location, capacity, stockpile site or evacuation arrangement is published here, and none may be added.
- No comparative measure of preparedness between states exists in any source read.
- Romania's alerts are the module's best-documented activations because the ministry publishes each case; the absence of a recorded activation elsewhere is an absence of publication read, not of activation.
- Poland's East Shield programme is published as including civil-protection works; what those comprise is a Polish disclosure decision and is not carried here.
Recorded events:Russian drones and aircraft violate the airspace of several AlliesSeptember 2025
Civilian exposure to hybrid pressureProtection
Current conditionRecurring, prosecuted at court paceAs of 2026-09
The Council stated in May 2024 that Russia is conducting hybrid activities against Allies. Individual cases sit at very different stages of proof, from convictions to charges without verdicts.
Arson, devices in transit networks, railway sabotage and interference with electoral and information systems, and the civil institutions that answer them.
Assessed as of 2026-09never reviewed as an object
How conditions reach this
Hybrid pressure and civilian exposure
Sabotage, arson and interference directed at allied societies are prosecuted as crimes against civilians, which is where the pressure lands and where its attribution is decided.
- Affected area or system Confirmed
- Access or service disruption Confirmed
- Civilian condition Plausible exposure
- Broader humanitarian significance Plausible exposure
| Indicator | Value | As of | Confidence |
|---|---|---|---|
| Allies named in the Council's hybrid statementThe alliance's own count of members affected by Russian hybrid activity when it made the finding Sources: NATO official texts and summit declarations↗ | 7 | 2024-05 | High confidence |
Hybrid pressure on civilian life
As of 2026-09
The North Atlantic Council stated in May 2024 that Russia is conducting hybrid activities against Allies — sabotage, acts of violence, cyber and electronic interference and disinformation — naming seven affected members. What that means in civilian terms is arson at commercial premises, incendiary devices in courier networks, interference with railway signalling and pressure on electoral and information systems. These are handled by police, prosecutors and courts on court timescales, in jurisdictions suspects have often left. The state's answer to an affected civilian is a case file rather than a defence, and that is the structural point this object exists to make.
Sources: Official government statements · NATO official texts and summit declarations↗
What this does not establish
- There is no official deduplicated series of attributed sabotage on flank territory, and this module builds none.
- The August 2026 Stuttgart verdict convicted one defendant and acquitted two on a prosecutor's attribution, which is why the object's condition is stated at court pace and not at the prosecutor's rung.
- Casualty, injury and damage figures were not established from primary sources and are not stated.
Recorded events:The North Atlantic Council states that Russia is conducting hybrid activities against Allies2 May 2024An IKEA store in Vilnius is set alight, and a court later convicts the arsonist9 May 2024; conviction 25 November 2025Three buses are burned at a Prague depot, and the arsonist is convicted without an attribution6 June 2024; sentence June 2025Incendiary devices posted from Lithuania ignite in German, Polish and British parcel networks20–22 July 2024; trial opened 17 April 2026An Estonian court finds that an arson was tasked by Russian military intelligence3 July 2025An explosive charge is detonated under the Warsaw–Lublin railway15–16 November 2025A German court convicts one defendant and acquits two in a parcel-sabotage case18 August 2026
Health and emergency continuityHealth & services
Current conditionNot publicly establishedAs of 2026-09
Nothing read for this module establishes the current condition of any flank state's health continuity arrangements. The object marks the gap rather than filling it.
The continuity of essential health and emergency services under collective-defence pressure — a family NATO names and the public evidence does not reach.
Assessed as of 2026-09never reviewed as an object
Health and emergency continuity
As of 2026-09
Civil preparedness in NATO's own framing includes the continuity of essential services and the ability of civilian systems to deal with mass casualties: the fifth of the seven baseline requirements NATO publishes for national resilience, in the version updated on 17 September 2026, is the ability to handle mass casualties and health crises. Nothing in the public record read for this module establishes the current condition of any flank state's health continuity arrangements, and this object states none. It carries no actor, event, chain or logistics link because none would be honest: no record in this module runs through a health system. It exists to mark the gap rather than to fill it, which is the honest treatment of a family the Alliance names and the evidence does not reach.
What this does not establish
- No national health-continuity arrangement was obtained for any flank state.
- Mass-casualty preparedness is named by NATO as the fifth of its seven baseline requirements, republished on 17 September 2026, and is not established in any source read here.
- This object deliberately carries no cross-reference. No actor, event, chain, logistics or terrain record in this module runs through a health system, and a link added for symmetry with other modules would be a link to nothing.
Energy continuityCivilian infrastructure
Current conditionFunctioning, with recorded outagesAs of 2026-09
Every system is operating. Individual links have been lost for periods measured in months and restored; nothing here describes a present shortage.
The electricity and gas links the flank runs on, their exposure to damage, and the residual dependence of two members on Russian supply.
Assessed as of 2026-09never reviewed as an object
Dated changes
- 2025-06 · RestorationThe Finland–Estonia interconnector severed in December 2024 returned to commercial use — six months out of service for one cable.Moderate confidence · Sources: Official government statements
- 2024-12-25 · InterruptionThe Finland–Estonia interconnector was severed.High confidence · Sources: Official government statements
How conditions reach this
Baltic undersea infrastructure damage and its exposure
Repeated damage to cables and pipelines in a shallow, crowded sea turned civilian interconnection into an alliance security problem, without resolving who was responsible for any of it.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
Dependencies
Rested on by:Communications and undersea connectivityTransport and civilian host-nation support
Physical systems:The Baltic maritime connection
| Indicator | Value | As of | Confidence |
|---|---|---|---|
| Cross-border links damaged since 2022Confirmed physical damage to named Baltic cables and pipelines; attribution is a separate question and none has reached a state Sources: Official government statements | 15 assets on 9 days | 2026-09 | Moderate confidence |
Energy continuity and interconnection
As of 2026-09
The flank's electricity systems are connected across borders by a small number of physical links, several of which have been damaged. An interconnector between Finland and Estonia was severed in December 2024 and returned to commercial use in June 2025 — six months out of service for one cable. Two members remain structurally dependent on Russian pipeline supply. This layer records the dependence and the outages and states no view on how a system would behave under a coordinated constraint, which is not established by any public source.
Sources: Official government statements
What this does not establish
- Operators do not publish redundancy, so nothing here supports a statement about what a further loss would cause.
- The commercial cost of outages is not established and no figure is stated.
- The Hungarian and Slovak pipeline dependence rests on reporting rather than on a structural source, which is why it is an economy-layer condition and not a canonical relationship.
Recorded events:The Balticconnector gas pipeline and adjacent cables are damaged8 October 2023A power interconnector and telecommunications cables are damaged in the Gulf of Finland25 December 2024
Communications and undersea connectivityCivilian infrastructure
Current conditionFunctioning, repeatedly interruptedAs of 2026-09
Fifteen named assets damaged on nine occurrence days since September 2022. In several cases traffic rerouted with no user impact; in others the link was lost until repair.
Submarine telecommunications between the Baltic states, Finland and Sweden, and what repeated damage to them has meant for users.
Assessed as of 2026-09never reviewed as an object
How conditions reach this
Baltic undersea infrastructure damage and its exposure
Repeated damage to cables and pipelines in a shallow, crowded sea turned civilian interconnection into an alliance security problem, without resolving who was responsible for any of it.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
Dependencies
Rests on:Energy continuity
Rested on by:Population warning and preparedness
Physical systems:The Baltic maritime connection
Runs on:Baltic Sea connection
What would change this
- Repair times and redundancy on damaged cross-border linksOperators publish fault notices and restoration dates. Whether redundancy has improved since 2023 is an operator question, and it is the measurable civilian consequence of the damage series.
Communications and undersea connectivity
As of 2026-09
Telecommunications between the Baltic states, Finland and Sweden run through submarine cables owned by commercial operators. Nine occurrence days since September 2022 have produced confirmed damage to fifteen named assets. Repairs have taken from days to months; in several cases traffic was rerouted with no user impact, and in others the link was lost until repair. The civilian consequence is not the cut itself but the number of alternatives, which operators do not publish.
Sources: Official government statements
What this does not establish
- The number of alternative paths available to any given link is not published by operators.
- Satellite-navigation interference affecting the region is a continuous condition recorded in the airspace chain, not a counted occurrence, and it is not filed here as a connectivity outage.
Recorded events:A power interconnector and telecommunications cables are damaged in the Gulf of Finland25 December 2024NATO launches Baltic SentryJanuary 2025
Transport and civilian host-nation supportSupply access
Current conditionBeing rebuilt; main-line date moved to 2028–2034As of 2026-09-22
The Baltic rail corridor is under construction to a new gauge; on 22 September 2026 its main-line date moved from 2030 into the EU's 2028–2034 budget period. Host-nation support arrangements are bilateral and largely unpublished.
Sources: Official government statements · Rail Baltica programme authority (RB Rail AS)↗
The civilian transport and regulatory systems that reinforcement depends on, and the arrangements under which a host state receives foreign forces.
Assessed as of 2026-09-22never reviewed as an object
Dated changes
- 2026-09-22 · DelayedThe three Baltic prime ministers moved Rail Baltica's main-line date from 2030 into the EU's 2028–2034 budget period.High confidence · Sources: Rail Baltica programme authority (RB Rail AS)↗ · Official government statements
How conditions reach this
Plan-assigned forces and the movement constraint
Forces pre-assigned to regional defence plans have to reach them, which turns the Alliance's readiness decision into a demand on transport infrastructure it does not own.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
Dependencies
Rests on:Energy continuity
Physical systems:Rail Baltica and the Baltic gauge breakReinforcement enabling and host-nation support
Runs on:Military mobility
Resilience measures — announced kept apart from in place and tested
- In progress · Programme · as of 2026-09-22Rebuilding the Baltic network to European standard gaugeThe main line's date moved into the EU's 2028–2034 budget period.Lithuania · Latvia · Estonia · Sources: Rail Baltica programme authority (RB Rail AS)↗ · Official government statements
- Announced · Programme · as of 2026-09NATO policy for improving logistics supportNATO states it is developing the policy; no milestone has been published.NATO · Sources: NATO official texts and summit declarations↗
What would change this
- Publication of host-nation support and mobility arrangementsThese are bilateral and largely unpublished. Any publication would be new disclosure and would materially change what this layer can say.
Transport and the civilian side of host-nation support
As of 2026-09-22
Reinforcement under the regional plans moves over civilian infrastructure and through civilian regulatory systems: rail paths, road weight limits, port slots, customs clearance and the arrangements under which a host state receives and sustains foreign forces. The Baltic states' network is being rebuilt to European standard gauge under a programme whose schedule is the constraint, and on 22 September 2026 the three Baltic prime ministers moved the main line's date from 2030 into the EU's 2028–2034 budget period. NATO states that it is developing a policy for improving logistics support; no milestone for it has been published. Resilient transport systems is one of the seven baseline requirements NATO names, which is the alliance's own statement that this civilian system is a defence dependency. This layer describes the regulatory and infrastructure side and publishes no route, capacity or transit time.
Sources: NATO official texts and summit declarations↗ · Rail Baltica programme authority (RB Rail AS)↗ · Official government statements
What this does not establish
- No route, capacity, transit time or corridor is published by this module, by design.
- Host-nation support agreements are bilateral and were not obtained.
- The enabling command is linked because its published subject is the movement of forces; the link says nothing about which civilian systems it uses or how.
Institutions:Allied Joint Support and Enabling Command
Recorded events:The NATO Force Model replaces the NATO Response Force1 July 2024The Baltic prime ministers move Rail Baltica's main-line date from 2030 into 2028–203422 September 2026
The institutional basis of resilienceCivil resilience
Current conditionEstablished; baseline requirements updatedAs of 2026-09-17
Resilience is simultaneously a national responsibility and a collective commitment. NATO republished its seven baseline requirements on 17 September 2026; it sets no standard a member must meet and commands nothing in this layer.
Article 3, NATO's civil-preparedness framing, and the division of responsibility between the Alliance and its members.
Assessed as of 2026-09-17never reviewed as an object
Dependencies
Physical systems:Reinforcement enabling and host-nation support
Resilience measures — announced kept apart from in place and tested
- In place · Institution or standard · as of 2026-09-17Seven baseline requirements for national resilienceContinuity of government and services, energy, movement of people, food and water, mass casualties and health, civil communications, transport — updated on 17 September 2026. NATO sets no standard a member must meet.NATO · Also supports Energy continuity, Communications and undersea connectivity, Transport and civilian host-nation support, Population warning and preparedness, Health and emergency continuity · Sources: NATO official texts and summit declarations↗
- In place · Institution or standard · as of 2023-07Allied Resilience Objectives, agreed at VilniusNATO · Sources: NATO official texts and summit declarations↗
- Announced · Programme · as of 2024-07Pledge to integrate civilian planning into defence planningMade at Washington in 2024.NATO · Sources: NATO official texts and summit declarations↗
| Indicator | Value | As of | Confidence |
|---|---|---|---|
| Article 3 basisThe treaty clause NATO names as the root of resilience and civil preparedness Sources: NATO official texts and summit declarations↗ | In force since 1949 | 2026-09 | High confidence |
| Flank states hosting a NATO formationEach host state provides the civilian support that a foreign formation on its territory needs Sources: NATO official texts and summit declarations↗ | 9 | 2026-06 | High confidence |
The legal and institutional basis
As of 2026-09
NATO roots resilience in Article 3 of the treaty, under which members undertake by continuous and effective self-help and mutual aid to maintain and develop their individual and collective capacity to resist armed attack. The Alliance describes civil preparedness as a central pillar of resilience and a critical enabler of collective defence, and supports Allies in assessing and enhancing it. It publishes seven baseline requirements for national resilience — continuity of government and critical services, energy, the movement of people, food and water, mass casualties and health, civil communications and transport — updated most recently on 17 September 2026; Allies agreed Resilience Objectives at Vilnius in 2023 and pledged at Washington in 2024 to integrate civilian planning into defence planning. Resilience is simultaneously a national responsibility and a collective commitment: NATO sets no standard a member must meet and commands nothing here, and every system in this layer belongs to a state or to a company. The seven objects below follow the seven requirements where the module has evidence and mark the gap where it does not.
What this does not establish
- NATO's seven baseline requirements are published as headings; the assessment criteria beneath them and every member's performance against them are not, and none is stated.
- The Vilnius Resilience Objectives of 2023 are named by NATO and not published in full; the event linked is the summit at which they were agreed alongside the regional plans.
Recorded events:The North Atlantic Treaty is signed4 April 1949The Vilnius Summit approves a new generation of regional defence plansJuly 2023
Evidence and grading
- Figures
- Agency estimates on their own revision cycles. Each figure carries the date it is for; nothing on this surface averages, totals or compares across two vintages.
- Confidence
- How well established Vigil considers this assessment to be. It is not a measure of how severe the situation is.