Projects: Projects for Investigator UKERC Home UKERC Energy Data Centre Projects Choose Investigator All Projects involving NIA_NGET0174
Reference Number	NIA_NGET0174
Title	Embedded cyber risks within the procurement process
Status	Completed
Energy Categories	Other Power and Storage Technologies(Electricity transmission and distribution) 50%; Fossil Fuels: Oil Gas and Coal(Oil and Gas, Other oil and gas) 50%;
Research Types	Applied Research and Development 100%
Science and Technology Fields	SOCIAL SCIENCES (Business and Management Studies) 100%
UKERC Cross Cutting Characterisation	Not Cross-cutting 100%
Principal Investigator	Project Contact No email address given National Grid Electricity Transmission
Award Type	Network Innovation Allowance
Funding Source	Ofgem
Start Date	01 January 2016
End Date	01 January 2020
Duration	48 months
Total Grant Value	£179,000
Industrial Sectors	Power
Region	London
Programme	Network Innovation Allowance
Investigators	Principal Investigator	Project Contact , National Grid Electricity Transmission (100.000%)
Web Site	http://www.smarternetworks.org/project/NIA_NGET0174
Objectives	This project seeks to demonstrate cyber risks embedded within the procurement process can be reduced by developing a framework which can used to reduce risks. Develop a framework that could be used in the procurement process. The framework will contain protocols and procedures to be used when key operational assets are procured. Test the framework by performing a deep dive on purchasing an asset National Grid considers critical, and measure if the embedded risk has been managed.
Abstract	National Grid is increasingly buying intelligent assets which are critical to effectively operate the electricity and gas infrastructure in the UK. There is a risk that due to the lack of security awareness when purchasing, upgrading and deploying IT and OT assets, that vulnerabilities and malware are introduced. The consequences of the risk materialising is the loss of key systems supporting operations that could significantly impair and impact the ability to manage critical infrastructure; potentially leading to a loss of supply. EPRSC co-funded project. Research: Review the problem space with key stakeholders in National Grid. Literature review. Review National Grid supply chain landscape. Review the threat landscape. Review how other industry peers manage this problem. Development: Develop framework and review with stakeholders. Identify relevant assets which can be tested with the framework. Identify the tests needed to assess the framework to determine its effectiveness at reducing risk. Demonstrate: Trial the framework, analyse and evaluate the reduction in risk.Note : Project Documents may be available via the ENA Smarter Networks Portal using the Website link above
Publications	(none)
Final Report	(none)
Added to Database	14/08/18