The threat is entirely real and, in my estimation, has even grown in recent years. Indicators of this in particular are also the specific, non-public warnings from security agencies to the operators. These types of warnings are not given for no reason.

If we are talking about targeted attacks, these are scenarios where an attacker specifically tries to take control of the supply, for example by triggering unauthorized switching operations. If such an attack on the grid infrastructure were successful, the worst case is that it would cause a power outage. As more and more interfaces are being created with end consumers – the keywords here being smart metering, control boxes and electromobility – attacks on the technology installed at the consumers' location and their personal data can also be expected in the future.

Based on our current knowledge, the greatest threat comes from governmental or semi-governmental actors. They have the vast resources needed to carry out such a complex attack. Extortion scenarios by organized cyber criminals are also conceivable. Even though the media often reports on the possibility of terrorist attacks against our power grids, I consider this danger to be currently relatively unlikely.

All digitalization of the grids and the broad networking associated with it are only possible if extensive security measures are taken into account. No one would think to take a vehicle to market without brakes. However, like everywhere in life, cost is also a significant factor in the information security sector. Operators of critical infrastructure already have to accept significantly higher expenses than a small public utility for legal reasons. However, economic considerations must not be limited to security measures; they must include the entire application. Whether the increased convenience and efficiency of app access from a cell phone to station control technology justify the extensive security measures that are then necessary must be decided on a case-by-case basis.

In recent years, information security has developed from a special problem into an issue that permeates all of technological society, and so of course also all automated industrial sectors, but especially energy supply. In the future, both manufacturers as well as operators will try to develop and implement standardized solution concepts. However, since there are always more complex application scenarios in IT and control technology and attackers are developing new methods, the topic will not lose importance.