CNR-IRCrES, National Research Council of Italy, Research Institute on Sustainable Economic Growth
Ugo Finardi (MSc in Industrial Chemistry, Ph.D. in Materials Sciences and Technologies, discussing a thesis on the Technology Transfer practices in Nanotechnologies) is at present Researcher at CNR-IRCrES, the Research Institute on Sustainable Economic Growth of the National Research Council of Italy. He has been working previously at the University of Torino. His main research interests are: the socio-economic impact of technologies and innovation and of technology transfer; the organisation of universities and public research bodies; bibliometric assessment of the state and evolution of research. He has published more than 70 works among articles and book chapters in international and national journals and books, congress contributions, working papers and research and technical reports.
Presentation: A cost model for the implementation of security standards in electricity critical infrastructures
The present work contributes to the study of the costs of the implementation of security standards in the SCADA system networks of the critical infrastructures of power systems, presenting an analysis of costs. It starts from the analysis of two experimental case studies, one based on the study of the Polish TSO, the second of an Italian Generation Company. The study considers the intrinsic characters of the power grids and of their interconnections at European level, and analyse critical conditions, applying cases of hypothetical cyber-attacks to specific locations and timings. In this way it provides a reference for the identification of cyber-security related expenses and a reasoned measure of the costs needed to implement the standards. The adopted methodology quantifies the cash flows for the implementation and maintenance of the security standards. Once this exercise is done it infers the cost needed for the protection of the whole Country, considering the specific Country situation in terms of quantity of infrastructures. In this way it estimates the cost that a Country should afford with the overall adoption of security standards in electricity transmission and generation. The total involved costs were evaluated, as well as the ones to be borne by the operators starting from the current situation so as to comply with the standards requirements. At the end of the study useful suggestions for Transmission System Operators and Generation Operators are offered, besides a reasoned set of figures assessing the costs on the implementation of security systems. Moreover some discussion on how the conclusion impacts regulators behavior is provided. The work is relevant also in that a similar exercise has been seldom, if ever, tried previously.