Cybersecurity challenges around selling energy back to the grid
April 2023
IT in Manufacturing
By Simeon Tassev, MD and QSA at Galix
Simeon Tassev.
Utility providers are traditionally an attractive target for cybercriminals, evident by the number of high-profile attacks, both globally and locally, in recent years. In fact, the ransomware supply chain attack on the Colonial Pipeline in 2021 became the largest attack in US history, with the payment of a $4,4 million ransom. With President Ramaphosa’s recent plans to expedite the ability for households and businesses to sell surplus electricity from rooftop solar panels into the national grid, the cybersecurity question must be raised. We need to understand the potential threats and vulnerabilities of so many more connected endpoints and take steps to address them to minimise the risk of attack.
Digital means connected
South Africa’s power needs have grown out of line with the utility providers’ ability to supply, and many homes and businesses have turned to rooftop solar to address their own requirements. The infrastructure obviously needs to be adapted to allow for this, and there has been a lot of thought given to the billing processes and how electricity will be charged for and rebated in this new system.
However, due consideration must also be given to the cybersecurity requirements of this. In order to sell excess energy back to the grid, these private systems will need to be connected, creating a giant web of distributed devices, all digital, and all with varying means and levels of intelligence and connectivity, and all a potentially vulnerable access point for those with malicious intent.
Without considering the cybersecurity element, we risk creating thousands of additional vulnerabilities in an already attractive cybercrime target. In addition, there is a risk that these endpoints could be used to target businesses and individuals, if they are compromised.
Understanding is key
Connecting individual producers will be key in securing the country’s energy needs going forward and is a vital step that needs to be taken. It is also a significant part of the ultimate goal of creating smart cities and smart energy grids and solutions. However, any device that is connected is essentially a device that forms part of the Internet of Things (IoT) and could potentially be an entry point.
With electricity, many of these devices were not designed for connected purposes or to be accessed externally, and this alone makes them inherently vulnerable when they are connected. Risk assessments and due diligence must be performed around this, because the more systems are opened, the more they need to be secured.
The moment any system is opened to the internet, there are potential new threats that need to be understood, evaluated, and minimised, and measures need to be put into place to prevent attack and compromise. With multiple different systems configured in various ways, this can become quite a complex task. In addition, external and remote monitoring tools need to be considered in the complexities, as they too could be a point of entry.
The bottom line is that these risks need to be assessed and understood, because if there is a back door, an opening, or a vulnerability, eventually a bad actor will find a way to exploit it. Securing South Africa’s energy future needs to involve significant conversations not just around sustainability, but cybersecurity as well.
Further reading:
Even in autonomous systems, human insight is important
Schneider Electric South Africa
IT in Manufacturing
As AI, IIoT and digital twins reshape industrial operations, Schneider Electric’s Kobus Vermeulen and Bafana Msibi argue that the operator’s role is shifting from controlling equipment to interpreting intelligence, validating AI recommendations and making decisions that improve
Read more...
AI-based quality inspection scales across P&G operations
Siemens South Africa
IT in Manufacturing
Siemens and Procter & Gamble are expanding an AI-based visual inspection system across P&G’s manufacturing operations worldwide, inspecting products in real time at full line speed, and reducing scrap rates by 10 to 20% depending on the product.
Read more...
How sustainability unlocks real business impact
Rockwell Automation
IT in Manufacturing
Sustainability has moved from a compliance obligation to a strategic driver of resilience and value for manufacturers. Rockwell Automation explains how its Triple A framework and connected-data approach help producers cut energy, water and waste while improving productivity.
Read more...
Mining’s AI future will depend on people as well as technology
IT in Manufacturing
South Africa’s mining industry is embracing digitalisation and AI, but AvenirHoldings chief executive officer, Tshidi Mndzebele says the real test is whether the people behind the industry are equipped to move forward with it, and outlines five things mining needs to get right.
Read more...
How BIC overcame operational silos to integrate technology and people
Rockwell Automation
IT in Manufacturing
Manufacturing giant BIC deployed Plex MES from Rockwell Automation at its Bizerte plant in Tunisia, replacing fragmented, partly in-house software with a single cloud-based execution system that broke operational silos and improved shop-floor visibility.
Read more...
AI in industry is an early warning system, not a guarantee
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric’s Paul Steyn argues that AI in industrial maintenance is only as good as the infrastructure and people behind it, and explains the three layers a facility needs before predictive maintenance can deliver on its promise.
Read more...
SA’s mining industry must put people at the heart of its digital future
IT in Manufacturing
South Africa’s mining industry employs around 470 000 people while its digital transition accelerates. Avenir’s chief executive officer, Tshidi Mndzebele argues that technology should enable and upskill the workforce rather than replace it, setting out five ways mining can make technology work for its people.
Read more...
Quality control supports efficient tissue production
Valmet South Africa
IT in Manufacturing
Valmet’s advanced quality control technology is helping tissue producers improve product consistency while reducing energy and raw material consumption. Its latest installation at KORO Paper in Vietnam combines real-time measurement, process optimisation and non-contact, nuclear-free quality control.
Read more...
Patented algorithm maximises operator efficiency
Rockwell Automation
IT in Manufacturing
Rockwell Automation piloted a patented anomaly detection algorithm and FactoryTalk DataMosaix at its Twinsburg electronics plant, giving operators 30 to 60 days’ advance warning of stencil failure, improving fail rates by 22% and achieving a 200% return on investment.
Read more...
Cybersecurity must become part of the next era of industrial automation
Adroit Technologies
IT in Manufacturing
The EU’s Cyber Resilience Act is setting a global benchmark for connected products, making cybersecurity a core engineering requirement in industrial automation. Adroit Technologies and Mitsubishi Electric explain how building security into controllers, PLCs and drives from the outset helps South African manufacturers protect production and meet international expectations.
Read more...
printer friendly version