Improving cyber security culture within operational areas

Completed

Other Power and Storage Technologies(Electricity transmission and distribution)

Applied Research and Development

PHYSICAL SCIENCES AND MATHEMATICS (Computer Science and Informatics)
ENGINEERING AND TECHNOLOGY (Electrical and Electronic Engineering)

Not Cross-cutting

Project Contact
National Grid Electricity Transmission

Network Innovation Allowance

Ofgem

01 January 2016

01 January 2020

48 months

£179,000

Power

London

Network Innovation Allowance

Project Contact, National Grid Electricity Transmission

This project seeks to demonstrate cyber risks within the operational area can be reduced embedded by changing the cyber security culture within this area. Develop a strategy to improve cyber security culture that will measurably reduce cyber risks in the operational area of National Grid. The strategy will contain key areas of concern along with proposed solutions. Test the strategy by performing a pilot project on a selected area operational area of National Grid, and then review and amend original proposal if necessary.

The prevailing security culture within an organization may be strongly influenced by unjustified beliefs about what are the objectives of the organizations security policy and about what measures are effective in delivering those objectives. In order to adjust the culture of the organization so that such beliefs can be changed and so provide an environment better suited to delivering the desired security levels of security, the prevailing information security culture in the organization must be analysed and understood EPRSC co-funded project. Research: Review the problem space with key stakeholders in National Grid. Literature review. Review past National Grid security culture change programs. Review how other industry peers manage this problem. Identify what will be needed to develop the strategy and risk metrics. Development: Develop strategy including areas of concern and proposed solutions and review with stakeholders. Identify relevant operational area which can be tested with a pilot project Identify the tests needed to assess the framework to determine its effectiveness at reducing risk. Demonstrate: Trial the strategy, analyse and evaluate the reduction in risk.Note : Project Documents may be available via the ENA Smarter Networks Portal using the Website link above

20/08/18