Cybersecurity for Centralized and Distributed Power Generation at ISAGEN

This paper presents the answer to the cybersecurity challenges faced by the centralization of the electric power generation control in the second company of this type in Colombia. Likewise, it describes the main cybersecurity practices that were investigated, analyzed and implemented to establish and maintain a safe environment for operations, which allow facing the risks of cyberattacks on this essential service to the society. It presents the methodologies and technical measures that should have been considered in the different stages of the project to prevent cyberattacks from being effective, to identify them in a timely manner and to achieve the resilience of the supervision and control systems that were used and tested in this environment. It also shows how these results were used as a contribution to the evolution of Colombian national electric sector regulations on the subject and how they can serve as a basis for improvements to regulation and cybersecurity for other agents in the electricity sector in the country and the region.This paper presents the answer to the cybersecurity challenges faced by the centralization of the electric power generation control in the second company of this type in Colombia. Likewise, it describes the main cybersecurity practices that were investigated, analyzed and implemented to establish and maintain a safe environment for operations, which allow facing the risks of cyberattacks on this essential service to the society. It presents the methodologies and technical measures that should have been considered in the different stages of the project to prevent cyberattacks from being effective, to identify them in a timely manner and to achieve the resilience of the supervision and control systems that were used and tested in this environment. It also shows how these results were used as a contribution to the evolution of Colombian national electric sector regulations on the subject and how they can serve as a basis for improvements to regulation and cybersecurity for other agents in the electricity sector in the country and the region.

• Autores: Zuluaga, Diego
• Fecha de publicación: 2020
• Institución: Universidad EAFIT
• Repositorio: Repositorio EAFIT
• Idioma: spa
• OAI Identifier: oai:repository.eafit.edu.co:10784/25810
• Acceso en línea: http://hdl.handle.net/10784/25810
• Palabra clave: Cybersecurity; centralize electric power control; power generation cybersecurity; industrial cybersecurity; critical infrastructure cybersecurity; ISO/IEC 27002
• Rights: openAccess
• License: Copyright © 2020 Diego Zuluaga