The Cybersecurity Network Code is here

The anticipated Network Code (NC) on Cybersecurity for the electricity sector has now been published. The NC was adopted by the European Commission in March. This is a big step toward enhancing the cyber resilience of critical energy infrastructure.

Any specific project highlights?

Certainly, it’s challenging to choose, but a few highlights include involvement in multiple implementations of energy management systems (EMS) and supervisory control and data acquisition (SCADA) systems. Additionally, I collaborated on co-creating an innovation funnel, assisting a client in reaching sustainability targets and decarbonising its business and that of its customers. This involved creating a methodology and portfolio to define, select, and execute innovations as an incubator for new initiatives, both in business and technology, to realise a sustainable future.

The network code

Context. Cybersecurity has become a top priority for the EU energy sector. As the energy network becomes more digitalised, its vulnerability to cyber-attacks grows. The increasing frequency and sophistication of these attacks create an urgent need for well-defined security measures.
What’s the significance of publishing? Adoption marks the political agreement and formal acceptance of the NC. Publication, however, triggers the start of the implementation phase. This means that all relevant entities, including energy providers and regulatory bodies, are now required to begin complying with the code.
What’s new? The code sets uniform rules for performing cybersecurity risk assessments, reporting cyber-attacks, threats and vulnerabilities, and managing cybersecurity risks. It includes recommendations for securing the supply chain to protect against cyber threats as well.