Embedded cyber risks within the procurement process

Jan 2016

Electricity Transmission

Reference: NIA_NGET0174

Status: Complete

Start Date: Jan 2016

End Date: Jan 2020

Funding Licencee(s): National Grid Electricity System Operator and National Grid Electricity Transmission

Contact: Samir Odedra

Funding Mechanism Network Innovation Allowance

Research Area: None

Core Technology(ies): Comms & IT, Electricity Transmission Networks and Cyber Security

Estimated Expenditure: £179,000.00

Introduction: Define a framework to reduce acquiring cyber risk through National Grid procurement process. Analyse, quantify and model the current cyber threat across the supply chain. Review the existing National Grid supply chain landscape, then targeting specific asset types and develop a procurement framework that embeds cyber security within the process.

Objectives:

This project seeks to demonstrate cyber risks embedded within the procurement process can be reduced by developing a framework which can used to reduce risks.

Expected Benefits: Develop a framework that could be used in the procurement process.The framework will contain protocols and procedures to be used when key operational assets are procured.Test the framework by performing a deep dive on purchasing an asset National Grid considers critical, and measure if the embedded risk has been managed.