Page 41

Industrial Ethernet Book 104

Applications Distribution system operator using Ethernet extenders Managed Ethernet extenders enabled Netz Lübeck GmbH to meet ISMS requirements for increased diagnostics and alerting in its distribution system. Unmanaged and managed Ethernet extenders are operated together in one network with only one extender being required for each SHDSL segment group. IN ADDITION TO ACTUAL ENERGY SUPPLY, cities and municipalities need to meet legal requirements and specifications more and more. Years ago already, they were assigned responsibility for municipal IT security and network stability according to EnWG (German law on energy management) Part 3 §§ 13 and 14 as well as DIN ISO/IEC 27001. Information security management Like many municipal companies, Netz Lübeck GmbH is responsible for energy and water supply in the relevant catchment area. Therefore, the municipal supplier must know and meet the deadlines and framework conditions of the corresponding safety standards. The German association for gas and water technology reminded its members that energy supply companies (gas and electricity) have to prove certification according to DIN ISO/ IEC 27001 in conjunction with the IT safety catalog of the Federal Network Agency until January 31st, 2018. In addition, the deadline for water supply and wastewater disposal companies which are subject to the KritisV and which are to implement a safety standard on the basis of the regulation or a safety standard developed by the industry is May 2018. In addition to the installation of an EEG supply management system (EEG = German Renewable Energy Sources Act) for energy data acquisition and regulation required by the German Energy Act (EnWG) as of 2015, the employees of Netz Lübeck GmbH are currently implementing an information security management system (ISMS). The ISMS is the basis for certification according to DIN ISO/IEC 27001 which means that the Lübeck supplier achieves the specifications of the Federal Ministry of the Interior derived from the national plan for information infrastructures (NPSI) on time. “We are fully aware of our responsibility,” explained Rainer Zug, Automation/ Infrastructure Technology Manager at Netz Lübeck GmbH. He also assumes regulations to be tightened by the European Union with regard to Network and Information Security (NIS) and the BSI KritisV to be expanded in order to ensure reliable networks and to minimize risks of an attack to the IT systems. Application example of train-to-trackside communication. Digital distribution networks The Association of Municipal Companies (VKU = Verband kommunaler Unternehmen) thinks that the risk of failure or disturbance of the supply network in Germany currently is low. This results from a survey which records only a few significant attacks per month on the relevant IT systems. These attacks do not cause any damage. They are mainly targeted on individual employees and on access to the systems or the administration network. According to VKU this high level of security results from the fact that about twelve percent of the municipal companies have already implemented an ISMS, and more than 60 percent of the suppliers are planning to use an ISMS. In addition, the employees are given specific instructions on how to use the information technology systems. Approximately 60 percent of the companies also have their employees trained regularly. Regardless of the legal obligations, more than 90 percent of the municipal suppliers intend to take security measures in the future. To enhance protection against manipulation and a potentially associated blackout, creation and expansion of modern digital distribution networks according to VKU is of SOURCE: PHOENIX CONTACT fundamental significance. In a press meeting on this topic, Katherina Reiche, VKU Managing Director, and Josef Hasler, Chairman of N-ERGIE, again underlined the importance of the power distribution networks. Katherina Reiche refers to the distribution networks as the local system managers that will be the key to success for the energy turnaround. Katherina Reiche also explains that intelligent distribution network clusters for regional balance as well as powerful transmission paths for long-range transport of energy will be required in order for the energy turnaround to succeed. Acquisition of all relevant data This situation poses some challenges to small and medium-sized municipal companies in particular. In addition to the approaches of the German government, VKU, the Federal Association of the German Energy and Water Industries and Germany's digital association have published supporting guidelines on system responsibility and IT security: • Practical Guide to Supporting Measures by Grid Operators - Communication / Application Guide to Implementing System Responsibility, §§ 13 Sec. 2, 14 Sec. 1 and 14 Sec. 1c of EnWG. 41 2.2018 industrial ethernet book


Industrial Ethernet Book 104
To see the actual publication please follow the link above