go to top scroll for more


Projects: Projects for Investigator
Reference Number NIA_NGET0174
Title Embedded cyber risks within the procurement process
Status Completed
Energy Categories Fossil Fuels: Oil Gas and Coal(Oil and Gas, Other oil and gas) 50%;
Other Power and Storage Technologies(Electricity transmission and distribution) 50%;
Research Types Applied Research and Development 100%
Science and Technology Fields SOCIAL SCIENCES (Business and Management Studies) 100%
UKERC Cross Cutting Characterisation Not Cross-cutting 100%
Principal Investigator Project Contact
No email address given
National Grid Electricity Transmission
Award Type Network Innovation Allowance
Funding Source Ofgem
Start Date 01 January 2016
End Date 01 January 2020
Duration 48 months
Total Grant Value £179,000
Industrial Sectors Power
Region London
Programme Network Innovation Allowance
Investigators Principal Investigator Project Contact , National Grid Electricity Transmission (100.000%)
Web Site http://www.smarternetworks.org/project/NIA_NGET0174
Objectives This project seeks to demonstrate cyber risks embedded within the procurement process can be reduced by developing a framework which can used to reduce risks. Develop a framework that could be used in the procurement process. The framework will contain protocols and procedures to be used when key operational assets are procured. Test the framework by performing a deep dive on purchasing an asset National Grid considers critical, and measure if the embedded risk has been managed.
Abstract National Grid is increasingly buying intelligent assets which are critical to effectively operate the electricity and gas infrastructure in the UK. There is a risk that due to the lack of security awareness when purchasing, upgrading and deploying IT and OT assets, that vulnerabilities and malware are introduced. The consequences of the risk materialising is the loss of key systems supporting operations that could significantly impair and impact the ability to manage critical infrastructure; potentially leading to a loss of supply. EPRSC co-funded project. Research: Review the problem space with key stakeholders in National Grid. Literature review. Review National Grid supply chain landscape. Review the threat landscape. Review how other industry peers manage this problem. Development: Develop framework and review with stakeholders. Identify relevant assets which can be tested with the framework. Identify the tests needed to assess the framework to determine its effectiveness at reducing risk. Demonstrate: Trial the framework, analyse and evaluate the reduction in risk.Note : Project Documents may be available via the ENA Smarter Networks Portal using the Website link above
Publications (none)
Final Report (none)
Added to Database 14/08/18