1 OVERVIEWIn the past, substation networks were traditionally isolated and the protocols and data formats used to transferinformation between devices were often proprietary.For these reasons, the substation environment was very secure against cyber-attacks. The terms used for thisinherent type of security are:● Security by isolation (if the substation network is not connected to the outside world, it cannot be accessedfrom the outside world).● Security by obscurity (if the formats and protocols are proprietary, it is very difficult to interpret them).The increasing sophistication of protection schemes, coupled with the advancement of technology and the desirefor vendor interoperability, has resulted in standardisation of networks and data interchange within substations.Today, devices within substations use standardised protocols for communication. Furthermore, substations can beinterconnected with open networks, such as the internet or corporate-wide networks, which use standardisedprotocols for communication. This introduces a major security risk making the grid vulnerable to cyber-attacks,which could in turn lead to major electrical outages.Clearly, there is now a need to secure communication and equipment within substation environments. Thischapter describes the security measures that have been put in place for our range of Intelligent Electronic Devices(IEDs).Note:Cyber-security compatible devices do not enforce NERC compliance, they merely facilitate it. It is the responsibility of the userto ensure that compliance is adhered to as and when necessary.This chapter contains the following sections:Overview 365The Need for Cyber-Security 366Standards 367Cyber-Security Implementation 371P24xM Chapter 17 - Cyber-SecurityP24xM-TM-EN-2.1 365