Methodology for Identifying the Cybersecurity Maturity Level of Smart Grids

Cybersecurity for Smart Grids requires a combined focus on information security for IT systems, on communications network and on the physical equipment of the electric grid. Thus, this work aims to develop a methodology for the identification of the cybersecurity maturity level in smart grids. This methodology is based on two steps. The fisrt step corresponds to the identification of assets, threats and impacts and the second step corresponds to the analysis and classification of 126 requirements that are categorized in 16 groups. This analysis permit to identify the maturity level of a specific use case. The methodology was applied considering the SCADA (Supervisory Control and Data Acquisition System) of a Brazilian energy distribution company, comparing the SCADA developed by this company and another SCADA commercially available. The obtained results attest the validity of the proposed methodology, since they show that the method was able to identify the maturity level for both systems.