Cyber security for energy automation systems - New challanges for vendors

Cyber security has gained tremendous importance for energy automation systems over recent years. A lack of cyber security resilience endangers the reliability of the overall energy supply which is part of the critical infrastructure. This paper describes the new cyber security challenges which have emerged for vendors of energy automation systems and proposes solutions on how to resolve them. These range from technical, organizational to regulatory and process issues. Particular focus is brought forward on the implementation strategy, how to imbed cyber security within the products´ life cycle, the implementation of IEC 62351 and cyber security assessments. This paper is based on the experience gained by the Siemens energy sector group. The authors thereby hope to support electric utilities learn from these experiences and be able to better interface their cyber security strategy with the vendor´s strategy outlined in this paper.