Experience implementing IEC 62443 cybersecurity requirements in hybrid Battery/Solar power plant

(UK), as well as experiences acquired on sites of less complexity like pure battery energy storage systems, photovoltaic power plants, and wind turbine power plants. These environments pose unique challenges due to their reliance on standardised communication protocols such as IEC 61850 and the extensive use of Supervisory Control and Data Acquisition systems (SCADA). Ensuring cybersecurity in such systems requires addressing a broad range of technical and operational issues, from secure network design and component hardening to risk assessment and supplier coordination.

A central objective of this paper is to highlight the difficulties encountered during the integration of IEC 62443 with existing substation architectures. Specific emphasis is placed on the interoperability challenges posed by IEC 61850, the incorporation of third-party assets, and the variability in security expectations from clients. This paper aims to provide actionable insights into how design and engineering teams can incorporate cybersecurity principles early in the project lifecycle. It also addresses the selection of suppliers and subcontractors, ensuring that non-obvious yet essential parameters required for effective risk assessment are considered.