What are the pre-requisites for managing a critical infrastructure such as Air Traffic Management?

Failures of air traffic control systems can result in disastrous consequences, and this is why many countries have designated air traffic management as critical infrastructure. However, is the tried and tested philosophy for critical infrastructure protection applicable in the air traffic management?