Embedded cyber risks within the procurement process

Completed

Fossil Fuels: Oil Gas and Coal(Oil and Gas, Other oil and gas)
Other Power and Storage Technologies(Electricity transmission and distribution)

Applied Research and Development

SOCIAL SCIENCES (Business and Management Studies)

Not Cross-cutting

Project Contact
National Grid Electricity Transmission

Network Innovation Allowance

Ofgem

01 January 2016

01 January 2020

48 months

£179,000

Power

London

Network Innovation Allowance

Project Contact, National Grid Electricity Transmission

This project seeks to demonstrate cyber risks embedded within the procurement process can be reduced by developing a framework which can used to reduce risks. Develop a framework that could be used in the procurement process. The framework will contain protocols and procedures to be used when key operational assets are procured. Test the framework by performing a deep dive on purchasing an asset National Grid considers critical, and measure if the embedded risk has been managed.

National Grid is increasingly buying intelligent assets which are critical to effectively operate the electricity and gas infrastructure in the UK. There is a risk that due to the lack of security awareness when purchasing, upgrading and deploying IT and OT assets, that vulnerabilities and malware are introduced. The consequences of the risk materialising is the loss of key systems supporting operations that could significantly impair and impact the ability to manage critical infrastructure; potentially leading to a loss of supply. EPRSC co-funded project. Research: Review the problem space with key stakeholders in National Grid. Literature review. Review National Grid supply chain landscape. Review the threat landscape. Review how other industry peers manage this problem. Development: Develop framework and review with stakeholders. Identify relevant assets which can be tested with the framework. Identify the tests needed to assess the framework to determine its effectiveness at reducing risk. Demonstrate: Trial the framework, analyse and evaluate the reduction in risk.Note : Project Documents may be available via the ENA Smarter Networks Portal using the Website link above

14/08/18