Читать книгу Building an Effective Security Program for Distributed Energy Resources and Systems - Mariana Hentea - Страница 32

Defining the scope of security in the context of IT is not a trivial task because security is complex. Security is defined as the policies, practices, and technology that must be in place for an organization to use information for supporting business activities with a reasonable assurance of safety [Volonino 2004]. There are numerous corporate assets to protect. The protection involves managerial policies, technologies, and legal and ethical issues.

Therefore, in the context of this book, security has a wide base and addresses specific issues regarding Smart Grids, DERs, power grids, network communications, computers, technologies, information, organizations, critical infrastructures, and people.

Security relates to several areas such as physical security, information security, operation security, communication security, national security, network security, disaster recovery, laws and ethics, management, etc. These areas are interrelated and they affect each other. All technology, hardware, people, and procedures are woven together into a security fabric [Harris 2005]. In fact, the so‐called information society is increasingly dependent on a wide range of software systems whose mission is critical, such as telecommunications, control systems, financial systems, and power systems. The potential losses that are faced by businesses and organizations that rely on all these systems, both hardware and software, therefore signify that it is crucial for information systems to be properly secured from the outset.

Security is a condition of the system being protected from unintended or unauthorized access, change, or destruction [IIC 2015]. Therefore, a product, system, or service is considered to be secure to the extent that its users can rely on its functions (or will function) in the intended way [ENISA Glossary].