Economic Evaluation of the Information Security Levels Achieved by Electric Energy Providers in North Arctic Region

Energy Management of Municipal Transportation Facilities and Transport - EMMFT 2017

Sushko, O.P.^1 ; Kaznin, A.A.^1 ; Babkin, A.V.^2 ; Bogdanov, D.A.^3

Northern (Arctic) Federal University Named after M.V. Lomonosov, Severnaya Dvina Emb., 17, Arkhangelsk

163000, Russia^1

Peter the Great St. Petersburg Polytechnic University, Politechnicheskaya st., 29, St. Petersburg

195251, Russia^2

Arkhenergo, IDGC of the North-West, Free st., 3, Arkhangelsk

163000, Russia^3

关键词: Business information;    Digital transformation;    Economic evaluations;    Information security risks;    Operation algorithm;    Process Technologies;    Reliability standard;    Security software;   

Others  :  https://iopscience.iop.org/article/10.1088/1755-1315/90/1/012074/pdf
DOI  :  10.1088/1755-1315/90/1/012074

来源: IOP

【 摘 要 】

The study we are conducting involves the analysis of information security levels achieved by energy providers operating in the North Arctic Region. We look into whether the energy providers' current information security levels meet reliability standards and determine what further actions may be needed for upgrading information security in the context of the digital transformation that the world community is undergoing. When developing the information security systems for electric energy providers or selecting the protection means for them, we are governed by the fact that the assets to be protected are process technologies. While information security risk can be assessed using different methods, the evaluation of the economic damage from these risks appears to be a difficult task. The most probable and harmful risks we have identified when evaluating the electric energy providers' information security will be used by us as variables. To provide the evaluation, it is necessary to calculate the costs relating to elimination of the risks identified. The final stage of the study will involve the development of an operation algorithm for the North Arctic Region's energy provider's business information protection security system - a set of information security services, and security software and hardware.