Security Baseline for Substation Automation Systems

The use of information technology and the automation control systems in energy sector enables a more efficient transmission distribution electricity. However, addition to many benefits that deployment intelligent largely autonomous brings, it also carries risks associated with cyber security breaches. Technology form specific critical communication infrastructure, which powerful elements integrating IoT principles IED devices are present. It contains access such as RTU, IDE, HMI, SCADA provide data center on outer perimeter. Therefore, key question is how comprehensively protect these specialized approach implementation projects this area. To establish rules, procedures, techniques ensure smart grid sector, necessary understand threats bring appropriate measures distribution. Given wide range industrial technologies, difficult using standard constraints common IT technologies business processes. part comprehensive security, specifics legislative framework, technological constraints, international standards, protocols or company processes, others need be considered. In article, basic concept for power stations, system, presented based Smart Grid domain model emphasis substation intelligence, according Purdue model. main contribution paper design mitigation divided into mandatory recommended standards defined within MITRE ATT&CK matrix specified, concerning specifications substations. proposed industry-tested solution mapped meet ISO 27001 national legislation reflecting requirements NIS2. This ensures will met when implementing Security Baseline.