Back

Blogs

How to Enhance your Cyber Resilience with MITRE ATT&CK Frameworks

View All

Case Studies

H2Au: Developing models and analysis on the levelised cost of hydrogen

View All

Upcoming Events

LEMA Summit 2024

View All

Webinars

Thoughts

Elevating cyber security for an energy network client

19th Feb, 2024

THE CHALLENGE

Our client, who serves 910K+ customers in Northern Ireland, sought a Cyber Security partner for expert guidance and real-time support during incidents. They aimed for tailored advice, independence, and compliance with NIS and ISO 27001 standards.

Their expectations from their cyber security partner were:

  • Proven experience in generating policies, procedures, baselines, and standards.
  • Conducting NIS Regulation-based Gap Analysis.
  • Proposing methodologies and performing risk assessments.
  • Evaluating and testing implemented solutions.

Some of the client’s deliverables included:

  • Infrastructure health checks.
  • Application security and penetration testing.
  • Security training.

THE SOLUTION

  • We conducted two days of stakeholder engagement workshops to build key relationships and define the scope of work, ensuring alignment for a successful partnership.
  • Implemented ad-hoc services, established a dedicated ticketing system, and set up a secure file-sharing platform for efficient communication, incident reporting, and secure document uploads.
  • Performed a comprehensive NIS directive gap analysis, recommending updates and additions to ensure compliance with current security policies.

THE IMPACT

  • We developed an ongoing cyber security solution that adheres to NIS and ISO 27001.
  • The client commissioned Gemserv to undertake further security work relating to smart metering.

Authors

Mandeep Thandi

Director of Cyber & Privacy

Read Bio