Flexible Plug & Play Smart grid cyber security design and framework. Tim Manandhar

Transcription

1 Flexible Plug & Play Smart grid cyber security design and framework Tim Manandhar

2 Agenda Cyber security for smart grids Smart Grid cyber security framework FPP project approach on Cyber security Conclusions 2

3 Smart Resilience Cyber security in smart grid Three dimensions: Smart, Grid and Resilience Assets Transformers, Switchgear, Cables Power and Voltage Management Protection Customer Connection (electrical) Information Technology Safety Communications Technology Reliability Real Time Control Availability Automation Dynamic Customer Interaction Integrity Confidentiality Cyber Security

4 Cyber security in smart grid Additional security elements in smart grid New hardware and new technology New communications protocol Interface to the existing infrastructure Interface to untrusted network Smart Grid evolution

5 UKPN s existing security systems Policies Procedures Standards Guidelines Security forums Audits Penetration testing Personnel and site security Disaster and Emergency Response

6 Agenda Cyber security for smart grids Smart Grid cyber security framework FPP project approach on Cyber security Conclusions 6

7 Smart grid cyber security framework Approach for Smart grid cyber security Governance Projects & Changes Third Party Risks Business Risk Secure Systems and Architecture Response Capability Cyber Security Framework Practical, simple and userfriendly Governance tool Top down approach CPNI Good Practice Guides Aligned with existing UKPN policies and framework Awareness and Skills

8 Smart grid cyber security framework Framework components Reference to existing documents and processes Recommendation of new policies, procedures and tools UK Power Networks security-related policies Baseline security requirements Procedures Tools Standards & Guidelines

9 Smart grid cyber security framework Project life cycle approach Requirements Design Procurement Detailed Design Procurement Governance & Change Management Operation Commission / Handover Build Test FAT SAT Key: Policies Baseline Security Requirements Procedures Tools Standards & Guidelines

10 Agenda Cyber security for smart grids Smart Grid cyber security framework FPP project approach on Cyber security Conclusions 10

11 Case study in Flexible Plug and Play project Objective: cheaper and faster connection of DG to constrained parts of the network by trialling smart grid technologies and smart commercial agreements Duration: 3 years: January December 2014 Project Value: 9.7 million (6.7m funding from LCN Fund) Partners and Suppliers:

12 FPP Project Approach on Cyber Security Why security is important for FPP project? New hardware and new technology New communications protocol Interface to the existing infrastructure Interface to untrusted network Smart Grid evolution Radio mesh communications, ANM, smart IEDs IP based protocols such as IEC 61850, DNP3, modbus etc SCADA, Corporate IT and third party interaction DNO interface to Distributed Generation Control system smart grid rollout with complex and more ICT dependent design

13 FPP Project Approach on Cyber Security Flexible Plug & Play Solutions Active Network Management Dynamic Line Rating IEC over RF Mesh Quadrature Booster Control System Upgraded RTU Automatic Voltage Controller Generator Controller

14 FPP Project Approach on Cyber Security FPP Project Security Implementation Jan 2012 Project Start Mid 2012 Requirements specification Design & Development Early 2013 Security design reviews Security Risk Assessment September 2013 System Integration Acceptance testing Delivery of FPP Technical Solution Mid 2014 As-built solution assessment Implement additional Security Controls Implement additional security in RF mesh December 2014 Smart Grid Cyber Security Framework FPP solution Penetration Tests Knowledge Dissemination Dec 2014 Project End

15 FPP Project Approach on Cyber Security FPP Security context diagram

16 EU SGAM approach Considerations for Mapping: Interoperability Plug & Play DER Domain Data Model

17 Security Framework Communication Layer Critical interfaces: Using SGAM Communication layer mapping Interface with SCADA Control system Interface with the RTU Interface with a new DER domain

18 Security Controls

19 Agenda Cyber security for smart grids Smart Grid cyber security framework FPP project approach on Cyber security Conclusions 19

20 Learning and Conclusion Cyber security is a critical success factor in bringing smart + grid together successfully The framework recognises that we can re-use some of what we already have in place for IT but also accounts for key differences i.e. field equipment, customer interfaces, availability requirements, etc. The framework ensures that governance is in place across both smart elements and physical assets The framework recognises that smart grid security skills are required in the field as well as in corporate IT.

21 Thank you ukpowernetworks.co.uk/innovation