Ukrenergo has prepared its cybersecurity development concept for 2019-2023. The Concept is based on the analysis of Ukrenergo’s current information security environment, in-house experience and expertise of world leaders in cyber security and IT, primarily Israel. The Concept unites all the aspects of Ukrenergo cybersecurity system development and aims at strengthening the security of the information infrastructure and minimizing the negative impact of cybersecurity incidents on the company’s operations. In total, this makes 30 projects for the next 4 years. They include setting up a secure transport network for safe interaction with the outside world, organising a secure framework infrastructure and data centres, as well as setting up a Security Operations Centre along with personnel training. Most important of them are expected for implementation as soon as 2019-2020.
The draft concept was reviewed by the Security Service of Ukraine and the State Service for Special Communications and Information Protection within the framework of the Memorandum of Cooperation. They offered positive feedback on the Concept, while the recommendations received from these state security bodies have been incorporated in the document.
“We have already begun the implementation of the Concept. In particular, we create the Security Operations Centre (SOC) with its own toolkit and system for collecting and analysing information on security incidents. We have also commenced the process of physical separation of networks into corporate and technological. Implementation of the Concept will allow to create a reliable cybersecurity system, which is a key component of modernisation and automation of substations, ensuring the reliability and security of power transmission in line with European standards,” noted Serhii Halahan, Ukrenergo’s Chief Information Officer.