Electrify Europe 2018

CyberSecurity Changes our Perspective and Product Lifecycle Philosophy: Adopt a Secure Chain Approach to Transform your Suppliers to Partners (Room Arena 2)

The increasing digitalization in the energy sector is introducing new components into critical infrastructures that, in addition to a proper security configuration when integrated in the environment, need to guarantee strong security features by design. The Energy sector has recently witnessed an increased activity regarding cyber-attacks. Properly addressing cyber-security should become a priority covering multiple dimensions. Only a disruptive change of product lifecycle philosophy can make the difference in an always more interconnected world where cyber-attacks are easier and more popular, with specific papers and courses, with simple assessment tools and attack exploit that help not only blue and red team but also malicious attackers. Changing the philosophy start from a tailored risk management where threats are continuously evaluated, assets are identified and evaluated for their relevance and security weakness, and awareness, procedural and technical controls are continuously monitored. A continuous security testing with a deeply knowledge of impacts, touching them in physical war-rooms environments and in their digital twins, helps to change people’s culture adopting new approaches, working with cyber security teams with complementary skills and requiring directly (accepting) security changes in their direct work. Procuct lifecyle is deeply changing to ensure always more security care in R&D and physical production phases on shop floors where digital transformation become a new challenge: that helps the continuous development of cyber security layers in commissioning and service phases, ensuring an end to end secure chain that is only as strong as its weakest link.