-Sect 3.1.2 potential cyber computer system, use, its software, demonstrate appropriate, security telecommunications or computer independently verifiable Paragraph 4 attackers. operational technology communications analysis has been -Sect 3.1.4 equipment types, operating protocols or the way in applied to the preparation Information such system, software which the devices are of the programs/projects Paragraph 1 as Site Id, application, software interconnected is of proposed. manufacturers -Sect 4.1 middleware or other significant benefit to and model Public release of the relevant to the planning and executing Paragraph 1 and 3 numbers, specific details however cybersecurity exploits a successful cyber communication provides no public benefit -Sect 4.2.2 which may be successful intrusion. protocols and to consumers, and would Bullet point 3 when used against the information on actively work against the system should not be made -Appendix 1 various software public interest, increasing public. bugs and other the probability of -Paragraph 1 and product or successful cyber Tables specific system intrusion. issues. Appendix 4.4.6 Details which Capex Information affecting Any information which Information gives The detailed information provide useful the security of the gives those with malicious potential cybersecurity has been included in the RTU Replacement reconnaissance network or mischievous intent attackers details on the business cases so that Program:
-Sect 3.1.2 Paragraph 4 -Sect 3.1.4 Paragraph 1 -Sect 4.1 Paragraph 1 and 3 -Sect 4.2.2 Bullet point 3 -Appendix 1 -Paragraph 1 and Tables potential cyber security attackers. Information such as Site Id, manufacturers and model numbers, communication protocols and information on various software bugs and other product or specific system issues. computer system, telecommunications or operational technology equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. use, its software, computer communications protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. demonstrate appropriate, independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion. Appendix 4.4.6 RTU Replacement Program: Details which provide useful reconnaissance Capex Information affecting the security of the network Any information which gives those with malicious or mischievous intent Information gives potential cybersecurity attackers details on the The detailed information has been included in the business cases so that
Energex%20-%20Appendix%201.1%20Confidentiality%20template%20-%20July%202015.docx