risk based security asset life-cycle management

Introduction and Business Case framing

SecureGas follows a Business Case (BC) driven approach, with three main phases: Construction, Demonstration and Validation & Diffuse. In this direction, each BC addresses the customization, deployment, and testing of the SecureGas high-level reference architecture (HLRA) and the extended components. This resulted in the deployment of a specific security solution (i.e. SecureGas service), integrated as far as possible into operations and currently on the process of being evaluated by the business case owner (i.e. DEPA, EDAA) during pilot activities.

Bussines Case 1 of SecureGas addresses: Transportation and Distribution (high-level analysis of Midstream up to Downstream) of Gas at strategic (project planning), tactical (project risk assessment) and operational (Distribution Network) level. It is compliant to EU Regulation 2017/1938 for “A risk-based approach to assessing the security of supply and establishing preventive and mitigating measures enables efforts to be coordinated and brings significant benefits in terms of the effectiveness of measures and optimization of resources”.

The Critical Infrastructures that have currently integrated the SecureGas solution and begin to test it as the BC1 owners, are that of DEPA and EDAA, supported by KEMEA and the technical partners (WINGS, INNOV, GAP, EXUS, IDMG).

During the past months, the activities involved the deployment and on-site integration of sensors and systems for the SecureGas solution, according to end-user needs, system requirements and reference architecture. IT/OT infrastructure tests have completed and technical partners were able to execute bilateral tests on collected data and validate the respective requirements of the Business Case 1. The entire process is being documented as a brief guideline, which will be finalized once the initial installation of the SecureGas solution is complete.

The on-site integration pilot ensures the proper deployment of the SecureGas solution to BC1, and allows for the pilot execution to now follow, for the proper validation of the integrated system. To this purpose, the components have been customized to address the specific requirements of BC1 needs. Specifically:

  • Remote bilateral integration tests have been performed for the validation of the successful message exchange between the different SecureGas components.
  • Sensor positions and installation procedures have been finalized.
  • The SecureGas components (both software and hardware) have been installed into DEPA and EDAA premises and successfully onfigured.
  • DEPA and EDAA existing infrastructure and legacy systems have been integrated into the SecureGas solution.
  • The BC1 pilot tests are ready to start.

Installation Pictures (EDAA Anthousa)

Specifically, for each partner, WINGS has concluded the Design and Development phase. All sensors and other devices are assembled and performed aggregation and processing of all sensor outputs All sensors/gateways and interconnection are completed except from the Gas and Flame sensors (delayed delivery due to COVID19).

The integration of the ARTEMIS ™ VMs are installed and configured and activated in both EDAA and DEPA servers. The components are now ready to capture and process events (via KAFKA, broker/producers/cunsumers). Bilateral Integration with other partners has started and is still on-going.

The RMG component from EXUS – GAP has been customized to address the specific requirements of BC1 needs. Remote bilateral integration tests have been performed between RMG and the Artemis Platform (the only component that RMG communicates within the SecureGas toolkit) and the interfaces and data structure exchanges were validated. The RMG component (EXUS) has been installed and configured into DEPA and EDAA premises. In addition, dedicated security breach scenarios for both DEPA and EDAA sites are being developed and relevant risk levels and resilience indexes are being assessed.

Those scenarios provide the knowledge database needed to enable the real time tool functionalities.

Finally, INNOVand GAP have installed the necessary systems and sowftware for the RAW component. All field devices (video cameras, WiFi access points and environmental sensors) have been set up, installed and configured on both operators’ sites. The Presence Analytics and Video Analytics components have been installed on the operators’ local servers and calibrated for the needs of BC1 Use Cases in order to generate the desired events.

The RAW component has also been developed and installed on DEPA and EDAA servers, as well as on KEMEA server. Virtual integration has been carried out in order to test and validate end-to-end functionality, from the field components to the Correlator, and then to the RAW component up to KEMEA’s H3CIP system.The Business Case demonstration is planned for the week 7-11 June with technological providers and external stakeholders. In that context, SecureGas partners and external stakeholder will evaluate the result of the demonstrated Business Case through dedicated questionnaires.

Installation Pictures (DEPA CNG)