Cyber-security risk management is about determining and understanding potential threats, evaluating the impact on operations, and creating processes to manage them. The investment required needs to be balanced against potential risks. Cyber security in AMI involves more than the technical security of the solution. As systems and processes of energy utilities become more intelligent and increasingly integrated, they also become more attractive targets for attacks.
The threat of unanticipated security breaches is not only about the loss of income or reduced customer satisfaction but finally about consumer privacy and the stability of the electricity network. The addition of an AMI system extends the utility network throughout the service territory and therefore adds a new set of potential risks. A utility consideration on how to manage this new reality is critical. Overall, AMI security consists of both technical and organizational aspects. Improvements can be made in various categories, including people & processes, IT infrastructure, and procuring the right solutions.