1. Protection of Electricity Networks - Interconnectivity related aspects Rajesh Nair Bratislava, 10. October 2014

2. 2Protection of Electricity Networks - Interconnectivity related aspects The Change in Banking OLD Front office agents who take care of your needs. RECENTLY Cash from ATMs, e-banking NEW Device based banking, location based payments, flexible access to funds

3. 3Protection of Electricity Networks - Interconnectivity related aspects Production Consumption Transmission & Distribution Today: One- Way Future: Two- Way Are There Parallels in the Power System?

4. 4Protection of Electricity Networks - Interconnectivity related aspects Rapidly Changing Paradigms Energy eco system »Vertical integration »Horizontal sliced »System of systems Architecture »Individual islands »Separated layers »A mixed world Operations »Predictable »Market variable »Market and environ- ment variable Security »Not an issue »Take care of your area »An integrated world Communication »Serial, point to point »Grouped, proprietary »Open and uncontrolled

5. 5Protection of Electricity Networks - Interconnectivity related aspects Cyber Threats are a Reality! “We have information, from multiple regions outside the United States, of cyber intrusions into utilities, followed by extortion demands. We suspect, but cannot confirm, that some of these attackers had the benefit of inside knowledge. We have information that cyber attacks have been used to disrupt power equipment in several regions outside the United States. In at least one case, the disruption caused a power outage affecting multiple cities. We do not know who executed these attacks or why, but all involved intrusions through the Internet.“ Tom Donahue, the CIA's top cybersecurity analyst Source: NewsBites January 18, 2013

6. 6Protection of Electricity Networks - Interconnectivity related aspects »Power systems and automation are changing in the face of new opportunities and challenges »Parts of energy infrastructure is internet based and easily attackable »With smartgrids and smartmeters the vulnerabilty of IT-systems is even increasing »Swissgrid is operating a critical infrastructure. Security of supply must be assured »All power systems have Industrial Control Systems (ICS), are they secure? Why Security for the Power System?

7. 7Protection of Electricity Networks - Interconnectivity related aspects Cyber related roles and players ActorsDesc.PolicySecurity OpsCrisis Mgt EUROPE EUSpecific directorates active in policy definition DG Home, DG connect, DG energy, ACER. National governments NATO, National governments NATO, National Governments ENTSOETransmission system Operators Group CSP WG Cyber InformalNot defined COUNTRY National regulatorsCost and Market development regulation Cost Security (not all) Not involved National Government agencies Agencies connected with defence, law enforcement and Auditing Cyber criminality, Critical infrastructure protection Information gathering and dissemination etc. National CERTs TSOTransmission system operator role InternalInternal and Govt. cooperation Crisis management teams Internal and various Govt. agencies DSODistribution System operators InternalInternal and Govt. cooperation Crisis management teams Internal and various Govt. agencies CEVendorsR&D, Products and Sales Based on market needs Based on productsBased on products and situation CEStandardization agenciesVarious standards related to technology Industries, and markets Based on market needs Not involved

8. 8Protection of Electricity Networks - Interconnectivity related aspects StandardizationVendors Intra Organizational Cross Organizational Government Integrated Governance as Main Target

9. 9Protection of Electricity Networks - Interconnectivity related aspects Swissgrid Security Approach is Multi-Dimensional (1) Prevent »Normal security controls »Strong updating and upgrading of the infra- structure »Isolation »Architectures that are inherently secure Monitor »Device level monitoring of behaviour »Network level behaviour »Plausibility checks on the data »Watching the actors »Monitoring the interconnects Respond »Rapid isolation capabilities in design for all actors, inter- connectors and infrastructures »Redundancy with minimum commonality where possible »Standardize non-critical elements Horizontal Component Total Vector Vertical Component

10. 10Protection of Electricity Networks - Interconnectivity related aspects Swissgrid Security Approach is Multi-Dimensional (2) “Divide and rule”»No monster systems for everything. Focus on smaller areas and integration into system of systems »Carve up data sources into smaller areas »Operational network design with easily isolatable regions and functions Security in each layer»Access, communication, operations, network, etc Secure the communication channel »Keep the channel as secure as possible Check the data (contextual plausibility checks) »Depending on the quality and reliability of the data, decide what to do with it »Automate only on secure data sources

11. 11Protection of Electricity Networks - Interconnectivity related aspects A Decision-Making Framework Identify the critical assets or the ones that make the biggest “bang” critical assets: make the impact smaller by segmentation »Increase the resilience »Increase the security in layers »Contextual data checks »Encryption »Isolation »Separation non critical assets: do not use the data operationally »Defence in depth based on business cases »Accept that the systems are inherently unsecure »Use data accordingly Implement a process to keep these systems monitored and set up an emergency response capability at the organizational, country and European level.

12. 12Protection of Electricity Networks - Interconnectivity related aspects »We have a pan-European integrated electrical grid network »Regulation in a number of countries looks only at cost »A risk based approach sounds good… but in practice could lead to exposing the various risk appetites of various linked entities »We are exposed. There have been a few incidents already. Maybe it is not a good idea to wait for someone else to act. A minimum standard and agreement is required. Need for a minimum standard