A HOLISTIC REVIEW OF CYBER RISK FOR THE DISTRIBUTION OF POWER

Simple item page
dc.contributor.affiliationFrazer-Nash Consultancy
dc.contributor.affiliationIET
dc.contributor.affiliationSP Energy Networks
dc.contributor.authorLittle, Steve
dc.contributor.authorNayyar, Anuj
dc.contributor.authorNeilson, David
dc.contributor.countryUnited Kingdom
dc.contributor.countryUnited Kingdom
dc.contributor.countryUnited Kingdom
dc.contributor.detailedauthorLittle, Steve, Frazer-Nash Consultancy, United Kingdom
dc.contributor.detailedauthorNayyar, Anuj, IET, United Kingdom
dc.contributor.detailedauthorNeilson, David, SP Energy Networks, United Kingdom
dc.date.accessioned2019-07-24T12:37:14Z
dc.date.available2019-07-24T12:37:14Z
dc.date.conferencedate3-6 June 2019
dc.date.issued2019-06-03
dc.description.abstractWithin any organisation, including those of a Distribution System Operator, an understanding of PPITFC is held across, Human Resources, Quality, Facilities or the IT department, and often what is documented is not always an accurate representation of reality.  Given a cyber-attack is typically a combination of socio and technical elements, and in order for an organisation to respond or recover, a holistic understanding of PPITFC and the interdependencies between them are required.It is unrealistic for an organisation to think that by implementing cyber technology at its boundary, it is completely secure from a persistent attacker.  For an organisation to respond or recover to a potential or real cyber-attack, it needs to consider cyber over a number of phases.  The National Institute of Science and Technology (NIST) propose a framework including a number of phases where an organisation can mitigate a cyber-attack:Identify – organisational understanding to understand cyber risks across PPITFCProtect – implementation of controls to manage cyber risksDetect – defines activities to identify cyber activityRespond – activities to implement action against a detected cyber incidentRecover – identification of activities to restore capability after a cyber incidentWithin this paper we will describe the importance of having a holistic approach for PPITFC to defend against a cyber-attack within the power distribution network and how this information can be effectively captured. We will also demonstrate how this information can be used to protect a power distribution organisation across the various phases to respond or recover to potential or an actual cyber-attack.
dc.description.conferencelocationMadrid, Spain
dc.description.conferencenameCIRED 2019
dc.description.openaccessYes
dc.description.peerreviewedYes
dc.description.sessionDSO business environment enabling digitalization and energy transition
dc.description.sessionidSession 6
dc.identifier.isbn978-2-9602415-0-1
dc.identifier.issn2032-9644
dc.identifier.urihttps://cired-repository.org/handle/20.500.12455/97
dc.identifier.urihttp://dx.doi.org/10.34890/195
dc.language.isoen
dc.publisherAIM
dc.relation.ispartProc. of the 25th International Conference on Electricity Distribution (CIRED 2019)
dc.relation.ispartofseriesCIRED Conference Proceedings
dc.titleA HOLISTIC REVIEW OF CYBER RISK FOR THE DISTRIBUTION OF POWER
dc.title.number655
dc.typeConference Proceedings
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
CIRED 2019 - 655.pdf
Size:
153.41 KB
Format:
Adobe Portable Document Format
Download
Published in
CIRED 2019 Conference