This document discusses critical infrastructure security in the energy sector and outlines challenges, threats, and recommendations. It defines critical infrastructure as any facility whose damage or destruction would significantly impact customers, grid reliability, national security, the economy or public health and safety. The document recommends that companies individually define and identify their critical facilities, assess security guidelines, and implement workshops to support industry. It notes recent cyberattacks like Stuxnet and outlines potential weak points and attack strategies at the facility and management levels, including available information on past terrorist attacks on international critical infrastructure related to electricity, oil/gas, water, and transportation.

1. By Hossam A. Zein
Critical Infrastructure SecurityCritical Infrastructure Security
in energy sectorin energy sector
‫ﺿوء‬ ‫ﻓﻲ‬ ‫اﻟﺗﺣﺗﯾﮫ‬ ‫واﻟﺑﻧﻲ‬ ‫اﻟطﺎﻗﺔ‬ ‫أﻣن‬‫ﺿوء‬ ‫ﻓﻲ‬ ‫اﻟﺗﺣﺗﯾﮫ‬ ‫واﻟﺑﻧﻲ‬ ‫اﻟطﺎﻗﺔ‬ ‫أﻣن‬
‫اﻟﺣﺎﻟﯾﺔ‬ ‫اﻟﺗﺣدﯾﺎت‬‫اﻟﺣﺎﻟﯾﺔ‬ ‫اﻟﺗﺣدﯾﺎت‬
CCriticalritical
IInfrastructurenfrastructure
PProtectionrotection
CC
II
PP

2. TThreathreat EvaluationEvaluation
Private Sector
Public Safety
National
Infrastructure

3. IInnvolvingsvolvings
Energy
facilities
&
network
WaterGovernment
CIP Transportation
food
Health
care
Banking
&
finance
ICT

4. WWhathat is Critical !is Critical !
Any facility or combination of facilities, if severely
damaged or destroyed would !!! ;
• Have a significant impact on the ability
to serve large quantities of customers
for an extended period of time
Risk i to serve large quantities of customers
for an extended period of time
Risk i
• Have a detrimental impact to
reliability or operability of the
energy grid or …
Risk ii
• Cause significant risk to national
security , national economic
security or public health and safety
Risk iii

5. IInternterdependencydependency

6. EExecutivexecutive cyclecycle

7. NationalNational StructureStructure

8. LLow Levelow Level StructureStructure -- EffectivesEffectives
Committee
1
Board of
Trustees
- Awareness
-Standards
- Development
Needs
- Peer review
CIP Advisory
Group
Committee
2
Committee
3
CIP self-
Directed
Teams
Standing
committee
Energy
Sector
- Analysis
-Communications
- Processes and
Practices
Development

9. WWhathat to do !to do ! Philosophy of work
Response cycle

10. CCriteriariteria –– 1010 rulesrules

11. HHowow to !to ! -- GuidelinesGuidelines
-
• Each company defines and identifies its own
critical facilities and functions
--
• Each co. assesses the usefulness of the guidelines
individually and adapts them as needed
• The guidelines are living documents and expected
---
• The guidelines are living documents and expected
to change according to vulnerabilities
----
• Implemented and supported by workshops for
industry

12. WWherehere is my nextis my next ATTACK !ATTACK !
Stuxnet
the game changer if wanted

13. What is next ?What is next ?
• What is your weak points, how to
secure your zone
Facility level volunrabiltues
High management level
• Plans Strategies , knowledge is
power
High management level
attacks
• Several up to date terrorists attacks on
international critical infrastructure are
available included Electricity, oil/gas,
water services/ transportations .
Note

14. AAnyny of thoseof those ? ? ?? ? ?

15. BByyee