We guarantee Cybersecurity Management in industrial environments
The challenge Reduce the risk of suffering cyberattacks and their possible impact on key national infrastructures
Asociación Nuclear Ascó-Vandellós (ANAV), the company that manages the Ascó and Vandellós II nuclear power plants which together generate 8% of the electricity consumed in Spain, is aware of the need to protect its assets and systems against cyberattacks aimed not only at operating networks but also at management networks.
In the last few years, cyberattacks on industrial facilities have grown steadily, due to their greater level of exposure among other factors, thus increasing the need for protection. This has forced most of these facilities to develop protection plans for their critical infrastructures with the support of the Ministry of Internal Affairs, in order to detect vulnerabilities and improve their response to cybersecurity incidents.
The challenge for Minsait, Indra's Digital Transformation unit, was to develop and implement solutions for managing and improving this Plan in an effective and ongoing way, fulfilling ANAV's core objectives, based on the need to protect the assets from cyberattacks.
The solution Advanced monitoring solution for IT and Communications Systems
Minsait has made available to ANAV its proprietary tools, technical and human resources, and its strong professional links and alliances focused on the protection of industrial systems and the defence against and response to any cybersecurity-related incident, in compliance with the critical infrastructure protection plans. These solutions monitor the IT and Communications systems of the nuclear power plants. The protection system is based on three fundamental and closely-related areas: cybersecurity monitoring by means of SIEM (Security Information and Event Management) tools, proactive security management and incident response capabilities.
The Monitoring Service implemented in ANAV has been capable of analysing and managing events and security warnings provided by the different data sources that make up the IT platform. Minsait's proactive management approach to security and its early warning services has made it possible to manage any possible vulnerability of the power plant assets, thus reducing the possibility of cybersecurity incidents occurring. At the same time, the response capacity to security incidents has been increased by applying preventive and reactive measures through technical support actions, audits and periodic analysis.
