Security gaps assessment of smart grid based SCADA systems. (8th July 2019)

• Record Type: Journal Article
• Authors: Mir, Abdul Wahid; Ketti Ramachandran, Ramkumar
• Is Part Of: Information and computer security. Volume 27:Number 3(2019)
• Page Start: 434
• Page End: 452
• Publication Date: 2019-07-08
• Subjects: Government regulation -- SCADA -- Smart grid -- Gap assessment -- Security challenges -- Industrial control systems (ICS); Computer security -- Management -- Periodicals; Computer networks -- Security measures -- Periodicals; Data protection -- Management -- Periodicals; 658.47
• DOI: 10.1108/ICS-12-2018-0146
• Languages: English
• ISSNs: 2056-4961

Abstract

Abstract : Purpose: Supervisory control and data acquisition (SCADA) systems security is of paramount importance, and there should be a holistic approach to it, as any gap in the security will lead to critical national-level disaster. The purpose of this paper is to present the case study of security gaps assessment of SCADA systems of electricity utility company in the Sultanate of Oman against the regulatory standard and security baseline requirements published by the Authority for Electricity Regulation (AER), Government of Sultanate of Oman. Design/methodology/approach: The security gaps assessment presented in this paper are based on the security baseline requirements that include core areas, controls for each core area and requirements for each control. Findings: The paper provides the security gaps assessment summary of SCADA systems of electricity utility company. Practical implications: The summary of threats and vulnerabilities presented will help stakeholders to be proactive rather than reactive in the event of any attack. Originality/value: This case study discusses the various security challenges in smart grid based on SCADA systems and provides the summary of challenges and recommendations to overcome the same.