Cyber Security To Be Bolstered To Protect Oman’s Power Generation Sector

Muscat: In a bid to shield Oman’s power generation infrastructure and elaborate networks of meters safe from malicious cyber-attacks, the Authority for Public Services Regulation (APSR), is preparing to enact cybersecurity standards and regulations to secure this vital component of the country’s power infrastructure.

A draft cyber-security standard along with a draft regulation for the country’s Electricity Metering System has been made public by the regulator, with a view to eliciting feedback from the general public before ultimately finalising it.

This move follows warnings issued by multiple independent and international agencies who have warned of malicious cyber-attacks on meters for fraud and other ill intentions.

“The objective of this Standard and the Electricity Metering System Regulation (the Regulation) is to ensure that the End-to-End Electricity Metering System (the System) is secure from reasonably foreseeable cyber-attacks, throughout its lifecycle (design, implementation, testing, operation, decommissioning and disposal),” said the Authority in its advisory on the public consultation.

Vulnerabilities in the Electricity Metering System aren’t limited to the smart meter alone, but encompasses the multiple elements at the consumer’s premises, the communications hub, in-house display unit, and all communications and telecommunications used with the system. However, the billing and payment systems are safe from such threats.

“The System will provide a much larger “attack surface” for cyber-attacks with the installation of connected, advanced meters in consumer premises throughout Oman. This increases the cybersecurity risk to the System with the potential to cause disruption of electricity supply to consumers, enable financial fraud, unauthorised disclosure of consumers’ personal data, and undermine confidence in the electricity sector,” the Authority noted.

Interested members of the public have until August 22, 2021, to offer their comments or observations to the Authority on the draft standard and regulation.