Analysis of cybersecurity findings in over 100 energy systems

This paper analyses security issues in over 100 global energy facilities, including substations, power plants, and control centres, using intrusion detection systems (IDS). It identifies the top five most common network security risks and highlights unsecure implementations in substations. It also details operational issues on the station and process bus, such as configuration errors, network failures, and IEC 61850 interoperability problems. The paper provides guidelines for secure protection, automation, and control (PAC) system implementations, offering a blueprint for cyber-resilient substation networks and advancing PAC system cybersecurity practices.