GUARD: A Living System for Whole-of-Nation Resilience

For most of the twentieth century, national defense rested on a clean separation. Military threats were met by military force, while civilian life carried on undisturbed in the background. That separation no longer holds. The US-Israel-Iran conflict that began on 28 February 2026 proved the point in real time. Military operations triggered simultaneous pressure on Gulf shipping lanes, energy markets, and supply chains, while cyberattacks hit infrastructure and disinformation spread in parallel. It is the same pattern seen throughout the last decade, from the 2021 Texas grid failure, to COVID-19 supply shocks, to the strikes on Ukrainian infrastructure. Crises stopped respecting organizational boundaries a long time ago. Nations that still plan in silos are discovering that those silos fall together. The issue was never a lack of planning. It is that the plans were never built to work with one another.

This whitepaper introduces GUARD (Governance, Utilities, Assurance, Readiness, and Digital), a whole-of-nation total defense framework built on one foundation: a nation is only as resilient as the connections between its parts. GUARD draws on the proven practices of Finland, Sweden, and Singapore, the three countries that have gone furthest in putting total defense into practice. It organizes national resilience around five integrated pillars, each broken down into measurable components and assessed against a shared maturity model. The framework aligns with existing standards, including the UNDRR Sendai Framework, OECD critical infrastructure principles, and the EU's CER Directive and NIS2, and builds on them by bringing grey-zone response and civil-military coordination into one operating structure.

Most governments already know where their vulnerabilities lie. What GUARD offers is a way to act on that knowledge. Instead of fragmented, sector-by-sector planning, it gives leaders a clear picture of which capabilities actually work under pressure, which are assumed to work but have never been tested, and which don't exist at all. Infrastructure operators get defined obligations and clear triggers for when and how to act. Communities get clear roles to play at every stage of a crisis. The frameworks, the evidence, and the international examples are already there. What's missing, for most nations, is simply the decision to start.