Smart utilities highly vulnerable to cyber threats – Technologist

The modernization of utility infrastructures is enabling increased efficiencies and reliability through digitization, connectivity, and IT-based approaches. Smart cyber assets are transforming both power and water grids, allowing operators to deploy and leverage a new generation of functionality and customer services.

But the future of these modernization efforts remains at risk as authorities ignore the cyber security posture of these projects. This is exasperated by issues with adapting cybersecurity to OT environments and an overall lack of knowledge and expertise in bridging these divides.

The lack of sustained public support sends a deflated message to operators in the field about the importance of cybersecurity.

“Worryingly, both power and water utilities have reported advanced persistent threats which exploit flaws in industrial control systems. More critically, run-of-the-mill cyberthreats such as ransomware and DDoS attacks are increasingly affecting operator’s cyber-assets, both on the back and front-end. Cybersecurity must be a concerted effort by all stakeholders, including the public. With only partial support, the risks intensify,” warned Michela Menting, Research Director of Digital Security at ABI Research.

While power and water grid stakeholders will spend over US$8 billion globally on cyber-securing utility infrastructures in 2018, only a small portion of that will be dedicated to operational technologies and smart systems. Grid modernization efforts are an ideal time to start designing and integrating digital security and provide an opportunity for adapting existing mechanisms and processes to the OT space –  from industrial control systems to smart meters.

“Operators and other stakeholders should remain firm in their commitment to cybersecurity, despite the backseat public support. Fortunately, from a private sector perspective, a growing vendor ecosystem –  including companies such as CY-OT, ForeScout, Nokia Networks, Nozomi Networks, OSIsoft, Radiflow, Sierra Nevada Corporation, SkyBox Security, and Smart Energy Networks – is emerging to hopefully address these issues,” Menting concludes.

These findings and more can be found in ABI Research’s Cybersecurity in Smart Utilities report.