Smart Grid Test Beds and Cyber Security A Government’s Perspective

Daniel Haglund

Information Assurance DepartmentSwedish Civil Contingencies Agency (MSB)

APEC-ISGAN Meeting 2012-01-24

MSB

• Overall governmental responsibility for society’s information assurance issues in Sweden

• Working to increase the security of Industrial Control Systems in critical societal functions for more than ten years

• Since 2011: CERT-SE• Started focusing on Smart Grid issues

2011…

Security-by-obscurity is dead…

Source: J. Städje,”Linux på Lovö”, TechWorld 10, 2007.

There is no silver bullet!

• Systematic work is needed– Systems surveying, risk analysis

• Good security culture (internal/external)• Organisational issues

– Clarified roles, responsibilities• Hardening of systems• Defence-in-depth• IDS/IPS• …

Swedish Test Beds

• Each one run by private company, in collaboration with public sector and academia– Royal Seaport

•Part of Stockholm•Urban living area, flats, houses, etc.

– Smart Grid Gotland•Island in the Baltic Sea•Grid owned by company•Company Test Bed for a long time

Smart Grid Test Beds related toIndustrial Information and Control Systems Security A Government’s Perspective

Daniel Haglund

Information Assurance DepartmentSwedish Civil Contingencies Agency (MSB)

APEC-ISGAN Meeting 2012-01-24

European Test Bed for Smart Grids – Cyber Security

• In the ERNCIP-program• First meeting next week

Thank you for the attention

Any questions?

If you have further questions, please don’t hesitate to approach me during this week or at:

daniel.haglund@msb.se