Utility Week

28 | 13TH - 19TH DECEMBER 2019 | UTILITY WEEK Operations & Assets Market view A cross the utilities sector, maintain- ing organisational security has never been as challenging as it is today. The range of threats has expanded, mali- cious attacks are common, and the cost of a breach is growing in severity. Indeed, the UK Infrastructure Transitions Research Con- sortium estimates that an attack on London's power grid could cost the capital's economy £11 million per day. With potential vulnerabilities across the entire physical and digital estate, organi- sations now need a greater degree of sys- tem integration to ensure safe, secure and compliant operations. The utilities sector is a core part of a country's criti- cal infrastructure, and one where even minor mistakes or issues can have major consequences. This scenario played out this summer when a series of lightning strikes disabled the national grid and created a domino effect where gas and wind power services were knocked out for several hours. Even a simple false alarm can lead to unnecessary shutdown, with significant implications for the public and an organisation's bottom line. And in industries like energy, a genuine breach can result in serious health and safety incidents, affecting roads and trans- port infrastructure as just one example. Unfortunately, a lack of system integra- tion is exposing organisations to significant risk. Not only does it make it difficult to identify false alarms, the gaps between sys- tems can present new attack vectors open to exploitation. To militate against this risk, a holistic approach to the design and deploy- ment of security measures is essential. And using technologies like cloud and analytics to drive connectivity of systems can help achieve this. Securing the perimeter The breadth of the security estate within utilities organisations is significant. Secu- rity cameras provide a good example of the benefits integration provides. A single plant will oŠen feature a network of thousands of IP-based cameras. Used in isolation, the sheer volume of foot- age these generate makes it incredibly difficult for operators to monitor and react to events taking place on-site. Smart integration with broader sys- tems helps to overcome this problem by leveraging a range of inputs and func- tionality. Facial recognition paired with access control can identify unauthor- ised persons attempting to enter a site using stolen or counterfeit credentials. Similarly, combining video surveil- lance, intrusion detection and analyt- ics means systems can automatically differentiate between real-threats and innocuous events at the perimeter. Many sensors are unable to tell the dif- ference between an intruder and a stray ball going over the fence, for example. This kind of functionality, as well as cloud-enabled remote monitoring, is becoming increasingly important as the energy sector shiŠs from traditional power generation plants to renewables. A typical solar or wind farm occupies a significantly larger area so the use of integrated and auto- mated systems is essential for meeting the growing challenge of securing perimeters. Elevating access control Access control and visitor management is another area where performance is improved by integration, increasing scrutiny at the front door and enabling location-tracking throughout a site. Take the issue of ex-employees. A weak link in many organisations, ex-employees oŠen retain access rights due to delays in updating security databases, potentially undermining security and data protection, and leaving employers open to theŠ and cor- porate espionage. By integrating with broader business systems, like enterprise resource planning (ERP), organisations can avoid these kind of instances by automating revocation of access credentials as soon as an employee is removed from the payroll. This approach also helps to ensure people authorised for entry have the right credentials to perform their role while on-site. In many instances, utilities professionals need to have completed specialised training, which oŠen requires regular renewal. Allow- ing an individual without the proper quali- fications into a restricted area can result in sanctions for the organisation. By integrating certificate management with the access control function, businesses ensure not only that individuals have the security profile necessary to enter a building, but that they have the level of competency required to do their job. Developing and enforcing standard oper- ating procedures that align with regulatory obligations is at the heart of good compli- ance practice. Moreover, it goes a long way to ensuring consistent uptime across a plant. Of course, the shiŠ to a modernised, inte- grated security model is not without its chal- lenges. Perhaps the most common obstacle facing organisations is the breaking down of long-standing internal team silos. Perhaps in the past, the IT department was unwilling or uninterested in working alongside the secu- rity department. While this may have been a tenable posi- tion then, it's not a viable approach to man- aging today's threats. Collaboration across departments – including security and IT – is a must-have to mitigate security risks. In a period of unprecedented change for the industry, every business unit has a role to play in safeguarding access to vital data and resources. James Somerville-Smith, marketing communications manager – Europe, Honeywell Security Integrate systems to beef up security Cloud computing, analytics and ERP can be employed to give you a holistic view of your organisation's security, says James Somerville-Smith. "Having operating procedures that align with regulatory obligations is at the heart of good compliance practice."

• Cover