Power Grids' Cyber Security (Part - II)

Grid Security Modeling

Framework -

Security in secondary systems should be supported by both organizational and operational processes that manage the critical infrastructures. This ensures stakeholders (e.g., utility site teams, suppliers, site maintenance and commissioning teams) are well informed and sensitive to those security measures that are in place.

These stakeholders must be made to use and maintain the secured system baseline while performing daily operations.

Basic Security Models:

1. Availability, Integrity, and Confidentiality (AIC),

2. Authorization, Authentication and Audit-ability (AAA)

The first framework ensures that the system's availability remains integral to its original use in a way that the system's operational and information data is protected and is only accessible confidentially to authorized parties or points.

The second framework ensures the same functionality as above but with an emphasis on Audit and Feedback of the systems.

Model establishment parameters

Defining Policy -

Policy will be based on:

• Available infrastructure in the scope of security framework

• Available of data architecture - hardware, software, dbms, data enablers, data editors, data users and data viewers

• Information classification and access points

• Network and security protocols

• Escalation Procedure

• Response Plan

Designing Processes -

• Assessing and establishing system baseline

• Periodic risk assessment and systems analysis

• Resolving risk issues

• Patch design and applications

• Testing of patches

• Revision of security and systems baseline

Selecting appropriate technology -

A “Secure by design” approach which is based on international standards like IEC 62351 and IEEE 1686 (as opposed to a “Bolt-on security” approach) can help to further reduce risk when securing control system components.

Documentation -

Including -

• detailed procedures

• processes

• network diagrams

• security architectures

• product, system technical and user documentation supplied by vendors

Top providers of security solutions for Power Grids

Next in line:

• Security Strategy

• Risk Assessment

• Vulnerability Testing

• Cloud Threat Detection

• Secure Channels (VPN)

• End Point Security

• Physical Updates

• Learning Security Systems (AI ML based Systems)

Part I - Link : https://www.sourceadvisory.in/post/power-grid-cyber-security