Eress Forum 2018 Workshop 2: The Future of Energy Metering Data. Data security basics

Size: px

Start display at page:

Download "Eress Forum 2018 Workshop 2: The Future of Energy Metering Data. Data security basics"

Lorin Allison
5 years ago
Views:

1 Eress Forum 2018 Workshop 2: The Future of Energy Metering Data Data security basics Standardisation Regulation IEC TC65 IEC x-x is a horizontal standard Railway Perspective - Overview related committees 1

2 Standardisation - Regulation Standardisation CEN CENELEC Cybersecurity Focus Group (CEN, CENELEC and ETSI) Technical Comities at CENELEC, CEN and ETSI Keep in mind: What can be standardised? Basic requirements for process on IT-security Principles of risk analysis and life-cycle What cannot be standardised? Fast changing requirements Thread landscape EU Regulation EU Cybersecurity Agency (Cybersecurity Act) from (COM(2017) 477 final): In discussion: cybersecurity certification scheme vs. conformity and certification scheme NIS Directive (EU) 2016/1148 Network and Information Systems ENISA - European Union Agency for Network and Information Security centre of expertise for cyber security in Europe 2

3 IEC- Cooperation with committees and consortia OPC Foundation ISA multiple JWGs/WGs and liaisons ISO TC299 Field Comm Auto mation ML SERCOS PLCopen ODVA PROFIBUS PROFINET International OpenADR CENELEC TC65x IEC TC3 IEC TC65 JWGs Liaisons WG Liaisons IEC TC56 IEC SEG7 IEC TC44 IEC TC65 / ISO TC184 Advisory Group created 2009 JWGs, Liaisons ISO TC184 ISO SM CC ISO SAG SM/I40 other ISO TCs CENELEC TC9X WG26 IEEE P2413 IoT ISO/IEC JTC1 WG10 existing proposed 3 Source: CENELEC TC65X meeting 2017 / Milano, modified

4 ISO JTC 1 - New SC42 Big Data ISO JTC 1/WG 9 Big Data to JTC 1/SC 42 ILNAS Standardisation Breakfast JTC: Joint Technical Committee 4

5 IEC TC65 IEC x-x is a horizontal standard IEC TC65 / SC65A IEC x / IEC x Functional safety RAMS Nuclear Medical Automotive Process automation Machine building Railway Signalling Rolling Stock Energy Power Systems IEC TC65 WG20 TR Framework for functional safety and security Fixed Installation Liaison shall be established IEC TC 65 IEC x-x Cyber security / IT-Security TC65 IEC x ISMS can be based on either approach ISO/IEC JTC 1 ISO ISO TC9X 5

6 IEC Series - Structure General IEC :2009 Terminology, concepts and models IEC TR Master glossary of terms and abbreviations IEC TS System security compliance metrics IEC TR IACS security lifecycle and use-cases Polices & Procedures IEC :2010 (EN) Establishing an industrial automation and control system security program IEC TR Guidance for an IACS security management system IEC TR : 2015 Patch management in the IACS environment IEC :2015 Security program requirements for IACS service providers System IEC TR :2009 Security technologies for industrial automation and control systems IEC Security risk assessment and system design IEC :2013 (EN) System security requirements and security levels Component IEC :2018 Secure product development lifecycle requirements IEC Technical security requirements for IACS components IACS: Industrial automation and control system 6

7 IEC Series - Structure General IEC x Polices & Procedures System IEC x IEC TR x Security Management System Security Assurance - Framework Reference Architecture, Requierements Security Level achieved (SL-A) Risk profile Security Assurance - requirements Reference Architecture, zone conduits Security Level target (SL-T) Component IEC x Security by design Security Assurance - product Protection profiles Security Level capability (SL-C) 7

8 Railway Perspective - Overview related committees Industrial-process measurement, control and automation IEC TC65 / CENELEC TC65X TC65 WG10 - IEC series TC65 WG20 - Framework to bridge the requirements for safety and security Electrical equipment and systems for railways IEC TC9 TC9 WG43 - Train communication network (TCN) TC9 WG46 Onboard multimedia systems for railways TC9 WG48 ODIS, On board Driving Information System TC9 AhG20 - IEC Guide 120 CENELEC TC9X TC9X WG26 IT-Security for Railway CENELECTC9X TC9X SG24 Signalling Rolling Stock TC9X WG26 IT Security TC9X WG21 EN & -2 SC9XA SG16 EN 50159:2011 SC9XA WG15 EN 50129:2018 SC9XA WG18 - EN 50128:2011 SC9XB WG31 EN 50657:2017 Requirements related to RAMS Requirements related to IT- Security IEC TC9 TC9 WG46 TC9 WG48 TC9 WG43 - IEC61375 series TC9 AhG20 IEC TC65 TC65X TC65 WG10 TC65 WG20 IEC Guide 120 Fixed Installation IEC ACSEC SC9XC WG17 8

9 Thank you for your attention

AGENDA ITEM: 2.3 Industry Standards Co-ordination Committee. Report from Chairman of GEL/9: Cross Functional Electrical European Standards

MEETING: DATE: 12 November 2014 SUBJECT: SPONSOR: AUTHOR: AGENDA ITEM: 2.3 Industry Standards Co-ordination Committee Report from Chairman of GEL/9: Cross Functional Electrical European Standards Anson