Challenge and objective

  • Many smaller DSOs rely heavily on their IT/OT vendors to handle cyber incidents.
  • We have investigated which factors may contribute to making it easier to include vendors in preparedness exercises.

Work performed

  • We have interviewed stakeholders, both DSOs and their vendors.
  • We have designed a number of incident response exercises that include DSOs and their vendors.
  • We have performed a trial run of such an exercise with one DSO and two vendors.

Significant results

  • We have provided specific guidance on how to include vendors in preparedness exercises.
  • We have developed 7 reusable attack scenarios that can be used for preparedness exercises.

Impact for distribution system innovation

  • DSOs can include vendors in preparedness exercises in a meaningful way.

Oddbjørn Gjerde

WP2 Lead
+47 99 730 027
Name
Oddbjørn Gjerde
Title
WP2 Lead
Organization
SINTEF Energi AS

 

Reference in CINELDI