Security requirements and controls for incident information sharing in the polish power system

Among the strategies of protecting information assets of the power system, sharing of information about current cybersecurity incidents between energy operators appears to be a prerequisite. Exchange of information leads to the effective detection of attacks and exploited vulnerabilities as well as the identification of countermeasures. This paper presents the results of continuation of our works on developing a secure and efficient information sharing platform for the power system, namely the security requirements for the platform together with the approach of their elicitation as well as security controls which respond to them.