Application security and network architecture for UK-based energy company

Background

The client had a specification to secure the level 3 (SII N3) industrial information system of their new EPR nuclear unit (EPR FA3).

Solution

Sogeti defined the requirements for CyberSecurity for applications connected to the level 3 IIS (network connection type, data flows, supervision) and for the operators / users of the level 3 IIS (profiles, roles, privileges & rights). Sogeti audited the applications using the level 3 IIS to assess their compliance with industrial domain cyber security requirements.

Benefits

Sogeti prepared a risk analysis report and a security audit report. A list of security recommendations were created for isolation between level 3 and levels 0 & 2 of the ICS architecture