2024
As the energy sector embraces digitization, cybersecurity has become a top priority for power utilities worldwide. With the increasing adoption of smart technologies, distributed energy resources, and advanced metering infrastructure, energy systems are now more interconnected than ever, heightening their vulnerability to cyber threats. Recognizing these critical challenges, USAID’s South Asia Regional Energy Partnership (SAREP) Program hosted a two-day cybersecurity workshop in Colombo, Sri Lanka on August 26-27, 2024.
The workshop was designed to raise cybersecurity awareness, enhance the preparedness of Sri Lanka’s power utilities and the National System Control Center (NSCC) to manage cyber risks effectively, and build capacity for sustained protection. Key areas of focus included security perspectives in the power sector, Industrial Control Systems (ICS) and SCADA security, technological advancements, threat vector modeling, cybersecurity standards and best practices, and corporate security culture.
During the welcome address, Ms. Apurva Chaturvedi, Senior Clean Energy Specialist at USAID India, emphasized the critical need to address cybersecurity vulnerabilities as the energy sector undergoes significant digital transformation. She highlighted that platforms like the South Asia Regional Energy Partnership (SAREP) are instrumental in sharing best practices and enhancing cybersecurity resilience across the region. The ultimate goal, she stated, is to support the development of a power sector that is robust, agile, reliable, and capable of withstanding emerging cyber challenges.
Dr. Sulakshana Jayawardena, Secretary of the Ministry of Power and Energy, Sri Lanka, highlighted in his keynote address the necessity of establishing robust cybersecurity guidelines within the national electricity policy. He emphasized that protecting critical assets, networks, and systems requires clear policies that define access, operations, and security protocols, thereby guiding all stakeholders to ensure the infrastructure’s safety and integrity. Nalinda Illangakoon, Chairperson of the Ceylon Electricity Board, stressed the importance of recognizing the cybersecurity challenges that come with the digitalization of the power sector. He noted that by integrating global best practices and collaborating with cybersecurity experts, Sri Lanka can effectively address these challenges and build a secure, resilient, and modern energy infrastructure.
Day one of the workshop commenced with a captivating session led by Dr. Faruk Kazi, who provided expert insights into “Security Perspectives in the Power Sector.” Dr. Kazi’s presentation delved into the critical importance of cybersecurity within the energy landscape, emphasizing the potentially devastating impacts of cyberattacks on power utilities. The second session dealt with detailed understanding of the actual SCADA control systems. Concluding the day’s intensive learning journey was Paul Sindhwad’s engaging session on “Vulnerabilities and Threat Vectors.” Her presentation equipped participants with the knowledge and tools to identify potential weaknesses within their systems and develop effective mitigation strategies to safeguard against emerging cyber threats.
Day two of the workshop featured engaging discussions on crucial topics such as grid security architecture and building reliable and secure networks to enhance business performance. Dr. Faruk Kazi and Parul Sindhwad, SAREP experts , conducted an insightful session on “Cybersecurity Standards and Best Practices.” They emphasized that fostering a security-centric company culture is paramount for achieving long-term security objectives and advancing overall organizational maturity. The final session was undertaken by Manas Malhotra, DTO, Cisco India, who led a compelling session that delved into real-world cyber attack scenarios, including a detailed analysis of the 2015 Ukraine Power Grid Incident. This session underscored the tangible consequences of cyberattacks on critical infrastructure and provided invaluable lessons for bolstering cybersecurity postures.
The workshop concluded with a resounding call to action, urging all stakeholders to prioritize capacity building, strengthen cybersecurity measures, and cultivate a culture of vigilance and preparedness. By fostering collaboration and embracing proactive security measures, Sri Lanka’s power sector is poised to enhance its resilience against cyber threats and ensure a sustainable and secure energy future.
