Double Virtualization intents to provide the Critical Infrastructure systems with the ability to mitigate cyber-attacks, by virtualizing functions and thus decoupling them from the physical devices. Additionally, the system is enhanced with integrative sensing and acting functionalities relying on Cyber-Physical systems and IoT technologies. The Double Virtualization functional and decision algorithms necessary to perform the mitigation actions are hosted by specific management devices. All combined, the system is enhanced to a state where, once attacks or failures occurring on a given component of the system are detected and notified, it is possible to migrate the applications from the faulty or failed device into another device, diminishing the downtime caused by the attack.