Public Consultation on Procurement Recommendations on Intelligent Electronic Devices (IEDs)

Overview

Under Article 35 of the Network Code for Cybersecurity (NCCS), the European Network of Transmission System Operators for Electricity (ENTSO-E) in cooperation with DSO Entity have developed a proposal for the Procurement Recommendations for Substation Intelligent Electronic Devices (IEDs).

This Methodology contains non-binding cybersecurity requirements that entities in the scope of the NCCS can use for the procurement of substation IEDs.

The document follows the rules of IEC 62443-1-5 for security profiles. It includes a description of the substation IEDs and their operational environment. The document identifies the information assets that are relevant to the substation IEDs and the threats to those assets that are considered under the scope of the NCCS. From the identified threats to the assets, a set of security objectives are derived. These objectives follow the ISO 27002 controls. This link is intended to support entities when linking these security requirements to their own ISMS.  From the objectives, a set of technical requirements for the product are given following two standards: IEC 62442-4-1 and IEC 62443-4-2.

Why your views matter

Since the methodologies will apply to variety of entities, it is crucial for ENTSO-E and DSO Entity that they are clear and useful to them. Therefore, it has been decided to launch a public consultation to ensure that various stakeholders can have their say on the document before it is sent to the competent authorities for final approval.