IEC IEC/TR62351-10 Edition 1.0 2012-10 TECHNICAL REPORT colour inside Power systems management and associated information exchange - Data and communications security : Part 10: Security architecture guidelines INTERNATIONAL ELECTROTECHNICAL X COMMISSION PRICE CODE ICS 33.200 ISBN 978-2-83220-419-1 Warning! Make sure that you obtained this publication from an authorized distributor. ? Registered trademark of the International Electrotechnical Commission - 2 - TR 62351-10 @ IEC:2012(E) CONTENTS FOREWORD 4 INTRODUCTION 6 Scope 2 Normative references . 3 Terms, definitions and abbreviations 3.1Terms and definitions ... 3.2 Abbreviations . Power systems - specifics and related standardization.. 4 8 4.1 Overview 4.2 Security specifics ..... .9 4.3 Relevant regulation and standardization activities . 4.4 Reference architecture for TC 57... .15 Security architecture in power systems 5 18 5.1 General .18 5.2 Security domains and their mapping to power system domains. .19 5.3 .21 5.4 Security controls . .26 5.4.1 General ..... Domain mapping of security controls 5.4.2 .28 5.4.3 Determination of necessary security controls ... ..30 5.4.4 Network-based security controls 6 Mapping security controls to the TC 57 architecture . .34 6.1 General. ..34 6.2 Security domains within a generic power system architecture 6.3 Application of security controls to a generic power system architecture .35 6.4 Application of security controls to specific power system scenarios ..38 6.4.1 General . .38 6.4.2 Substation automation. .39 6.4.3 Control center - substation communication. .41 6.4.4 Advanced metering. ..42 6.5 Identified gaps...... Annex A (informative) Further related material. ..45 Bibliography. 47 Figure 1 - Power systems - Management of two infrastructures (see Figure 11 of [4o]). .....9 Figure 2 - Comparison office / power system security requirements . ..10 Figure 3 - Graphical representation of scope and completeness of selected standards (enhanced version of Figure 1 in 4.1 of [4])... Figure 4 - TC 57 reference architecture (see [29]). . Figure 5 - Application of TC 57 standards to a power system (see [29], enhanced according to TEC/TR 61850.-1)... ..17 Figure 6 - Mapping of information security domains to power system domains .. ...20 Figure 7 - Mapping of IEC TC 57 communication standards to IEC 62351 parts ... Figure 8 - Mapping of IEC 62351 protocol related parts to the IEC 61850 stack . ...25 Figure 9 - Security controls overview.... ...27 TR 62351-10 @ IEC:2012(E) - 3 - Figure 10 - Generic system security assessment approach covering design and implement- ation... Figure 11 - Secure design, development, and operation process. Figure 12 - Generic power systems architecture. ..35 Figure 13 - Power systems architecture with security controls. ..36 Figure 14 - Example substation automation deployment with security controls .....39 Figure 15 - Example control center substation communication with security controls ... ......41 Figure 16 - Example advanced metering infrastructure deployment with security controls. ..43 Table 1 - IEC 62351 parts .11 Table 2 - Security domains (see also [35]) .. Table 3 - Mapping of logical interface categories to TC 57 reference architecture ...22 Table 4 - Security controls applicable to the different security domains ...28 Table 5 - General security standards applicable to network security. ...33 Table 6 - Example security approaches to power system communication protocols . .... .....38 Table A.1 - NERC CIP overview... ...45 Table A.2 - The SABSA matrix for security architecture development . .46 TR 62351-10 @ IEC:2012(E) - 4 - INTERNATIONAL ELECTROTECHNICAL COMMISSION POWER SYSTEMS MANAGEMENT AND ASSOCIATED INFORMATION EXCHANGE - DATA AND COMMUNICATIONS SECURITY . Part 1o: Security architecture guidelines FOREWORD all national electrotechnical committees (lEC National Committees). The object of IEC is to promote international co-operation on all questions concerning standardization in the electrical a