D1.2 Report on cyber threats and responses in OT

The digitization of modern industrial control systems, especially in the energy domain, leads to new cyber security threats. This is due to the evolution of IT and OT convergence, which undermines legacy security controls. The complexity of software and hardware increases. These new OT environments present specific security challenges in the context of ever-accelerating change in terms of the threat landscape, attack surface, ecosystems, solutions, and regulations. Furthermore, the increasing cases of attacks and vulnerabilities are declining the trust in the integrity of digital products and services.

In this work package, the general security problems in ICT chains and cyber threat responses in OT were analyzed. It took into account assets, actors, use cases and their threats related to the preliminary defined use cases. Hence, various incident databases were analyzed, and threats mapped to the use cases. An approach for cyber threat analyses for identifying threats for the use cases were developed and described.