SG-CG/SGIS SG-CG/SGIS. ETSI Cyber Security Workshop Sophia Antipolis, France, January the 16th, 2013 Jean-Pierre Mennella, Alstom Grid

Transcription

1 SG-CG/SGIS ETSI Cyber Security Workshop Sophia Antipolis, France, January the 16th, 2013 Jean-Pierre Mennella, Alstom Grid Page 1 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

2 European Commission DG ENERGY M/490 Mandate Mandate Scope and Objectives The objective of this mandate is to develop or update a set of consistent standards within a common European framework [ ] that will achieve interoperability and will enable or facilitate the implementation in Europe of [ ] Smart Grid services and functionalities [ ]. It will answer the technical and organizational needs for sustainable state of the art Smart Grid Information Security (SGIS), Data protection and privacy (DPP), [ ]. This will enable smart grid services through a Smart Grid information and communication system that is inherently secure by design within the critical infrastructure of transmission and distribution networks, as well as within the connected properties (buildings, charging station to the final nodes). Page 2 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

3 European Commission DG ENERGY M/490 Mandate Organisation Refer to European Commission Four Working Groups: First Set of Standards Reference Architecture Sustainable Process Smart Grid Information Security (SGIS) Mandate Scope M/441 M/468 coordination First Set of Standards New joint WGs Existing WGs Smart Grid Coordination Group (former JWG) Sustainable Processes New joint WGs Existing WGs Steering Group Reference Architecture New joint WGs Existing WGs EC Reference Group Information Security New joint WGs Existing WGs SG-CG Level Further Tasks EC Level TC Level Report 2.0 Liaisons Promotion NIST JISC China Etc. SGIS Working Group Serve as guidance group in standardization committees How to include cyber security in the general framework? Page 3 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

4 Converging Cooperation between EU and US Page 4 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

5 Standards Landscape Current SGIS Standards Landscape has been analysed according Relevance for Smart Grid Operators & Product Manufacturers / Services Provider Relevance for Technical and Organisational Guidance Page 5 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

6 Standards Landscape SGIS Standards Landscape Analyse led to first Recommendations: IEC enhancement proposals made to TC57:WG15 ISO 2700x Smart Grid Specific need (under study by JTC1/SC27) Page 6 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

7 Smart Grid Architecture Model Business Objectives Polit. / Regulat.. Framework Business cases which describe and justify a perceived business need Use cases including logical functions or services independent from physical implementations Information objects or data models required to fulfill functions and to be exchanged by communication Protocols and mechanisms for the exchange of information between components Physical components which host functions, information and communication means Interoperability Layers Business Layer Function Layer Information Layer Communication Layer Component Layer Outline of Usecase Generation Transmission Distribution Domains DER Data Model Protocol Customer Premises Functions Data Model Protocol Process Field Station Operation Market Enterprise Zones SGAM is a conceptual representation of the Smart Grid used to Model Use Case Identify required standards Identify gaps in standards and new standards needs Page 7 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

8 Security Levels & Data Protection Classes SG-CG/SGIS Security levels designed to create a bridge between electrical grid operations and information security Page 8 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

9 Security View per Layer Page 9 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

10 Use Case Mapping SGAM defined by the Reference Architecture WG of the SG-CG Security consideration in each cell and thus for each interface in the cube Business Layer Business Objectives Polit. / Regulat.. Framework Identification of existing security standards (requirements and solutions) Identifying gaps for which further standardization work has to be done Provide potential improvements for existing standards Interoperability Layers Function Layer Information Layer Communication Layer Component Layer Generation Transmission Distribution Domains Outline of Usecase DER Data Model Protocol Customer Premises Functions Data Model Protocol Process Field Station Operation Market Enterprise Zones Page 10 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

11 SGIS Toolbox Page 11 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

12 Objective: Integrate Security in the SG-CG General Framework Provide Smart Grid Use Case stakeholders an easy and pragmatic way to identify their security needs Identify gaps in use case recommended standards to deploy security requirements needed Page 12 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

13 Conclusion Standards needed to establish the basis of the Smart Grid Information Security are available today Nevertheless there is a need for enhancement and for additional standards to integrate Smart Grid specific needs The real challenge will be to maintain this effort and to have standards evolving as fast as the Smart Grid Information Security needs Page 13 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

14 Final Thoughts Connecting Smart Grid critical infrastructure to public network should be considered cautiously Sending encrypted and authenticated orders to Smart Grid component should be considered A need for a European ICS-CERT has been identified Page 14 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011

15 Thank You! SG-CG/SGIS Report is publicly available here: Page 15 CEN/CENELEC/ETSI Smart Grid Co-ordination Group CEN-CENELEC-ETSI 2011