Cybersecurity and Data Integrity in Energy Markets
What this domain tests
This domain tests protection of market data, bidding platforms, meter-to-settlement flows, and operational technology (OT) that supports dispatch. It emphasizes integrity and availability, not only confidentiality.
Core rules and concepts
- IT/OT separation: market-facing systems and generation/network control systems should be segmented, with controlled gateways and least-privilege access.
- Standards: IEC 62351 addresses security for power-system communications; NIST Cybersecurity Framework provides identify, protect, detect, respond, and recover functions. These support, but do not replace, market rules.
- Data integrity: bids, prices, meter reads, and settlement inputs need authentication, integrity checks, timestamp synchronisation, and immutable audit logs.
- Access and change control: multi-factor authentication, role-based access, dual approval for price or settlement changes, and logged privileged activity.
- Resilience: backups, tested recovery, incident response, and reporting to the market operator within required timelines.
Worked example
A meter data agent’s account is used to alter a settlement volume from 100 MWh to 80 MWh. Controls that would detect this include: signed or hashed meter records; a reconciliation between meter data and independent estimates; an audit log showing the user, time, and before/after value; and dual approval for manual adjustments. The investigation should preserve the original record, compare the change to the nomination, and check whether the account was shared or phished. The control objective is not just to restore the number but to prove which records are trustworthy and whether other settlements were affected.
Traps that cost marks
Treating cybersecurity as an IT-only issue; ignoring insider and shared-account risk; relying on passwords without MFA; failing to synchronise timestamps across market and OT systems; and assuming backups are valid without restoration testing.