Summary
Power grid digitalization exposes Supervisory Control and Data Acquisition systems to threats beyond perimeter defenses. This paper reports a production modernization at the National
Read more Read lessElectricity Administration of Paraguay that upgrades a legacy Supervisory Control and Data
Acquisition control center to Hyperconverged Infrastructure with Software-Defined
Networking. The platform removes single points of failure, reduces Mean Time To Repair from hours to minutes, and supports live migration and host failure tolerance without measurable service impact. Software-Defined Networking microsegmentation operationalizes the IEC 62443 Zones and Conduits model, addressing the East-West lateral security blind spot and limiting lateral movement. The design enables controlled Information Technology and
Operational Technology convergence for zero-downtime patching and rapid disaster recovery, validated by a critical virtual machine restore time of 2 minutes and 50 seconds. A return on investment assessment based on avoided incident costs indicates that a secure by design infrastructure improves resilience and provides a practical foundation for Defense-in-Depth and
Zero Trust architecture.
Additional informations
| Publication type | Session Materials |
|---|---|
| Reference | D2_11958_2026 |
| Publication year | |
| Publisher | CIGRE |
| Country | Paraguay |
| Study committees | |
| File size | 574 KB |
| Price for non member | 30 € |
| Price for member | 30 € |
Authors
RUIZ DIAZ Chrystian - ANDE; LOREIRO Matias - ANDE; JARA Micaela - UPTP; DAVALOS Enrique - FP-UNA
Keywords
ADMS, Cybersecurity, Defense-in-Depth, HCI, Hyperconverged, Lessons Learned, OT, Resilience, SCADA, SDN, vIED.
