This paper describes the methodology used to determine the security requirements to be applied to the extended IT\/OT architecture of the OSMOSE project; the methodology follows and extends the NISTIR 7628 guidelines for achieving a secure architecture by design.<\/p>\n","protected":false},"author":93,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"tags":[1344,1346,1325,1324,1330],"targets":[],"pubblicazioni_tipologie":[778],"class_list":["post-194126","pubblicazioni","type-pubblicazioni","status-publish","hentry","tag-cybersecurity-en","tag-cybersecurity-assessment-en","tag-electrical-system","tag-electricity-network-en","tag-security-en","pubblicazioni_tipologie-paper-en"],"acf":{"projects":{"ID":189183,"post_author":"464","post_date":"2024-06-25 10:06:02","post_date_gmt":"2024-06-25 08:06:02","post_content":"","post_title":"Optimal System-Mix Of flexibility Solutions for European electricity","post_excerpt":"The project address the identification and development of flexibilities required to enable the Energy Transition to high share of renewables through a holistic approach.","post_status":"publish","comment_status":"open","ping_status":"closed","post_password":"","post_name":"optimal-system-mix-of-flexibility-solutions-for-european-electricity","to_ping":"","pinged":"","post_modified":"2024-07-06 15:43:06","post_modified_gmt":"2024-07-06 13:43:06","post_content_filtered":"","post_parent":0,"guid":"https:\/\/www.rse-web.it\/progetti\/optimal-system-mix-of-flexibility-solutions-for-european-electricity\/","menu_order":0,"post_type":"progetti","post_mime_type":"","comment_count":"0","filter":"raw"},"order_posts":"","dont_show_search":false,"related_posts":false,"dont_show_hompage":false,"show_on_slider":false,"single_post_data":{"titolo_spot":"","post_content":"
When an electrical system control architecture needs to be extended with new functionality, it is necessary to manage the cybersecurity<\/em> consequences of design choices. Standards, methodologies and support tools can provide guidance early in the design stages by preventing costly corrective actions; this article describes the approach proposed in the European project OSMOSE (Optimal System-Mix Of flexibility Solutions for European Electricity)<\/em>. Within OSMOSE, a new Zonal Energy Management System<\/em> (Z-EMS) is designed. The Z-EMS has to be integrated into a pre-existing monitoring and control architecture. This paper describes the methodology used to determine the cybersecurity<\/em> requirements to be applied to the extended IT\/OT control architecture resulting from the introduction of Z-EMS; specifically, starting with the high-level architecture of the subsystems interacting with Z-EMS, a set of high-level cybersecurity requirements were determined by applying NISTIR 7628 guidelines. Initially, the high-level architecture was specified and mapped onto the SGAM (Smart Grid Architecture Model<\/em>) plane<\/em> with the support of specific software tools, focusing on identifying the key subsystems involved by the major data exchanges. The subsystems were then associated with the actors identified by the NISTIR 7628 guidelines; in doing so, it was necessary to enrich some of the NISTIR actors with new interfaces because those originally available were not adequate to represent the functionality of the subsystems in the updated architecture; the extensions were made in analogy and in accordance with the NISTIR methodology.<\/p>\n","scarica_file":false,"link_estreno":[{"link_text":"Download Memory","link":"https:\/\/www.osmose-h2020.eu\/wp-content\/uploads\/2021\/06\/CIGRE_D2_2019_NISTIR-7628-security.pdf"}],"button":{"text":"","link":""},"referente_group":false,"data_emissione":"2019-06-14","autori":"M.G. Todeschini, G. Dondossola, (RSE S.P.A.)","destinazione":"Cigr\u00e8 SC D2 Colloquium 2019, Helsinki, June 11-14, 2019","rif_rse":"19005964"},"satellite_post_url":""},"yoast_head":"\n