Cybersecurity challenges in Poland in the face of energy transition

Abstract: The transformation of the energy sector is one of today’s global megatrends. The main aim of this process includes shifting energy production to renewable sources, decarbonizing the economy, and improving energy efficiency, especially in the most energy-intensive sectors. These changes lead the energy sectors of different states to ensure security and maintain environmental protection in order to guarantee the civilization’s progressive development. One of the tools for the implementation and development of a new model of the energy sector is digitization, which is a direct consequence of the increasing complexity of the energy system. Digitization is an essential element in the management of smart grids and smart meters and for controlling the entire energy system, as well as guaranteeing fair distribution. The digitization process integrates the state energy system; however, it also increases its vulnerability to potential cyber-threats. The aim of this paper is to analyze the cybersecurity challenges facing the Polish power sector in light of the energy transition policy promoted in the EU with a particular focus on the latest legislation presented in the Clean Energy Package. The Polish energy sector is on the verge of structural changes; therefore the main question is: How to implement them to avoid errors? The paper provides a glimpse into the most venerable areas, which should be taken into consideration by political decision-makers.

Bibliography:

Barichella, A., Cybersecurity in the Energy Sector. A Comparative Analysis between Europe and the United States, Études de l’Ifri, Paris: Ifri, February 2018.

CEER Cybersecurity Report on Europe’s Electricity and Gas Sectors, Council of European Energy Regulators, 26 October 2018.

Cyber security: A growing threat to the energy sector. An Australian perspective, Hogan Lovells, March 2016, https://www.hoganlovells.com/en/knowledge/topic-centers/cybersecurity-solutions/~/media/c14b2cc829b04a6e841237f66882b2df.ashx.

CYBERSEC 2019. Recommendations & Key Takeaways, 5th European Cybersecurity Forum – Cybersec, Katowice, 29-30 October 2019.

Directive 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union.

Doktryna cyberbezpieczeństwa Rzeczypospolitej Polskiej, Warszawa: Biuro Bezpieczeństwa Narodowego, 2015.

Energy Insight: Cybersecurity in the energy sector, Energy Institute, https:// knowledge.energyinst.org/search/record?id=110329.

Energy Networks and Smart Grids. Cyber Security for the Energy Sector, European Cyber Security Organisation (ECSO), November 2018.

Goździewicz, W., Krupczyński, M., Kulesza, J. et al., NATO Road to Cybersecurity, ed. J. Świątkowska, Kraków: The Kosciuszko Institute, 2016.

IMD World Competitiveness Center, https://www.imd.org/wcc/world-competitiveness-center-rankings/world-digital-competitiveness-rankings-2019/.

IMD World Digital Competitiveness Ranking 2019, IMD World Competitiveness Center.

Kozłowski, A., ‘Cyberbezpieczeństwo w sektorze elektroenergetycznym’, Sektor Elektroenergetyczny, no. 1, 2019.

Krajowe Ramy Polityki Cyberbezpieczeństwa Rzeczypospolitej Polskiej na lata 2017-2022, Ministerstwo Cyfryzacji, Warszawa 2017.

Mataczyńska, E., ‘Lokalne rynki usług elastyczności – droga do implementacji’, EPI’s Analysis, no. 1, 2020, https://www.instytutpe.pl/wp-content/uploads/2016/01/Analiza-IPE-nr-1-2020.pdf.

Multiyear Plan for Energy Sector Cybersecurity, U.S. Department of Energy, March 2018.

National Cyber Security Index, https://ncsi.ega.ee/country/pl/.

Rice, E.B, AlMajali, A., ‘Mitigating The Risk Of Cyber Attack On Smart Grid Systems’, Procedia Computer Science, no. 28, 2014, https://doi.org/10.1016/j.procs.2014.03.070.

Ruszel, M., Młynarski, T., Szurlej, A., ‘The concept of energy transition’, in: Energy Policy Transition – The Perspective of Different States, eds. M. Ruszel, T. Młynarski, A. Szurlej, Rzeszów: Ignacy Lukasiewicz Energy Policy Institute, 2017.

Sechs Thesen zur Digitalisierung der Energiewende: Chancen, Risiken und Entwicklungen, https://germanwatch.org/sites/germanwatch.org/files/ publication/15649.pdf.

Smith, D.C., ‘Enhancing cybersecurity in the energy sector: a critical priority’, Journal of Energy & Natural Resources Law, 36:4, 2018, https://doi.org/10.1080/02646811.2018.1516362.

Study on Cybersecurity in the energy sector of the Energy Community – Final Report, Document no. FINR-CS-EC-211019, Blueprint Energy Solutions GmbH, December 2019.

System bezpieczeństwa cyberprzestrzeni RP, Ekspertyza NASK/CERT Polska na zlecenie Ministerstwa Administracji i Cyfryzacji, Warszawa, September 2015.

Szulecki, K., Szwed, D., ‘Społeczne aspekty OZE: którędy do energetycznej demokracji?’, in: Odnawialne źródła energii w Polsce. Wybrane problemy bezpieczeństwa, polityki i administracji, eds. K. Księżopolski, K. Pronińska, A. Sulowska, Warszawa: Elipsa, 2013.

Trubalski, A., Trubalska, J., ‘Bezpieczeństwo Polski w cyberprzestrzeni’, in: Bezpieczeństwo państwa w cyberprzestrzeni, eds. J. Trubalska, Ł. Wojciechowski, Lublin: Wydawnictwo WSEI, 2017.

Uchwała nr 125 Rady Ministrów z dnia 22 października 2019 r. w sprawie Strategii Cyberbezpieczeństwa Rzeczypospolitej Polskiej na lata 2019-2024.

Ustawa z dnia 5 lipca 2018 r. o krajowym systemie cyberbezpieczeństwa (Dz.U. 2018 poz. 1560).

Wittpahl, V., Digitalisierung. Bildung – Technik – Innovation, iit-Themenband, Berlin: Springer, 2017, https://doi.org/10.1007/978-3-662-52854-9_4.

World Energy Issues Monitor 2020, World Energy Council, London, 2020.

Wu, S.S., Liu, C.C., Shosha, A.F. et al., Cyber Security and Information Protection in a Smart Grid Environment, Proceedings of the 18th World Congress The International Federation of Automatic Control Milano (Italy) 28 August – 2 September 2011.

PDF: Download