DANSK DS/IEC/TR 62351-10 PDF

Cyber security becomes more and more a basic requirement in power control systems as standard IT and other forms of modern communication technology are being increasingly used for control and supervision of these systems. The application of IT communication technology requires the consideration of already existing vulnerabilities, which can be exploited by potential attackers, as recent intentional and unintentional cyber incidents on SCADA and other industrial control systems have shown. The increasing number of control system cyber incidents world-wide with medium to high impact underlines the requirement for appropriate security measures (cf. [G10]). This document targets the description of security architecture guidelines for power systems based on essential security controls, i.e., on security-related components and functions and their interaction. Furthermore, the relation and mapping of these security controls to the general system architecture of power systems is provided as guideline to support system integrators to securely deploy power generation, transmission, and distribution systems applying available standards. The International Electrotechnical Commission (IEC) Technical Council (TC) 57 Power Systems Management and Associated Information Exchange is responsible for developing international standards for power system data communications protocols. Standards developed within TC57 comprise for instance IEC 60870-5, IEC 61850, and IEC 62351 just to state a view. Especially the latter addresses technical security controls within power systems. A security architecture as targeted here does not only comprise technical means like the application of dedicated security entities, security protocols or security options in communication protocols to secure power system entities or the communication network. It also describes operational guidelines considering the available technical base as well as the personnel controlling the power systems. Moreover, interactions with existing (security) infrastructures also affect overall system security. Hands-on guidelines are proposed for the implementation of security mechanisms based on deployment examples, rather than a lecture or reference book for security in general. Therefore, available resources of information related to security of power systems or more general to security in smart grid are utilized and will be referenced as much as possible, without repeating their content here. Thus it addresses both, the power system engineer and the traditional IT security engineer. The examples used throughout the document are intended to better explain the influences of and the interactions with security. They are used as descriptive examples without the claim to be complete.