Securing the grid: Siemens Energy will launch a cybersecurity service for the energy industry

The energy industry is embracing digital technology, but cybersecurity can be an afterthought at smaller companies. However, small security incidents can quickly turn into big problems.

Power lines

Utilities might know how to secure their physical equipment against outside threats, but they don't necessarily have the same skills on their payroll when it comes to cybersecurity.

Photo: Fré Sonneveld/Unsplash

Siemens Energy is hitting the ground running during its first week as a standalone company, announcing plans for a modern cybersecurity service designed for the small- and medium-size energy companies that increasingly rely on digitized equipment.

The Managed Detection and Response service will be unveiled Thursday morning during a virtual event hosted by the Atlantic Council. It promises to scan and monitor the breadth of digital equipment used by utilities, power distributors and energy generation companies for security threats and advise those customers on appropriate responses, said Leo Simonovich, vice president and global head of industrial cyber and digital security for Siemens Energy, in an exclusive interview with Protocol.

"What we wanted to do was to help address the essential problem of visibility, the basic premise that you cannot protect what you cannot see," Simonovich said.

As utilities around the world have introduced a greater mix of renewable energy sources into their systems and started their own version of the digital transformation efforts well underway in other parts of the economy, they often layer newer technology upon older systems and equipment that wasn't designed for the digital age. Those utilities might know how to secure their physical equipment against outside threats, but they don't necessarily have the same skills on their payroll when it comes to cybersecurity, Simonovich said.

That means the "attack surface" — the opportunities for cybersecurity threats created by adding more software to the mix — of a modern utility has increased quite a bit.

"With each new node, each new device being connected to the energy system, we're experiencing an opportunity, but we're introducing a potential pathway for an attacker to disrupt," Simonovich said.

Siemens' MDR system gathers data from software that runs large industrial machines as well as data running across traditional information networks to paint a baseline picture of "normal" activity at an energy company. It then uses machine-learning techniques to detect and respond to abnormal levels of activity, advising customers on the best course of action.

Machine learning is the buzzword du jour in cybersecurity, with some justification. The sheer volume of threats to modern digital systems grows every day, and it's nearly impossible for any human being to stay on top of that much activity. Security companies large and small are increasingly selling services that use powerful computers to recognize patterns and detect anomalies, reserving human interaction for only the most serious threats.

Larger companies with bigger budgets often have similar systems already in place, but Siemens Energy is targeting this service at companies that haven't been able to afford the software or talent required to operate such a system, Simonovich said.

"We are only as strong as our weakest link," he said. "Because of increased interdependence between large and small utilities, many of the attacks that we've seen have started with a small utility and cascaded out to the whole system."

Siemens' service will require a three-year subscription, and it will take a few months for the system to sketch a portrait of an energy company's footprint and determine a baseline level of activity, Simonovich said. Costs will be based on the number of power plants, substations or other key pieces of equipment that make up an energy company's infrastructure.

Shares of Siemens Energy made their debut on the Frankfurt stock market on Monday. The company, which makes industrial power-generation equipment used by around 20% of the world's energy companies, has around 91,000 employees.

Diversity Tracker

Tech company diversity reports are more important than ever

More tech companies released their reports following the murder of George Floyd in 2020.

Tech companies started reporting their own numbers around 2014.

Photo: SCC/Getty Images

Years after most tech companies had been publishing diversity reports, Snap's CEO Evan Spiegel remained steadfast about not releasing his company's numbers. "I've always been concerned that releasing that data publicly only reinforces the perception that tech is not a place for underrepresented groups," he said during an all-hands in June 2020 after years of only releasing a report internally.

A few months later, Snap, one of the most vocal diversity report holdouts, became part of a second wave of companies that started releasing diversity data. Following the murder of George Floyd in 2020, others like Tesla and Oracle — which was facing a shareholder resolution on more transparency — also publicly released diversity reports. Netflix, although it had been posting diversity data on its jobs page quarterly since 2013, also released its first formal inclusion report in 2021.

Keep Reading Show less
Biz Carson

Biz Carson ( @bizcarson) is a San Francisco-based reporter at Protocol, covering Silicon Valley with a focus on startups and venture capital. Previously, she reported for Forbes and was co-editor of Forbes Next Billion-Dollar Startups list. Before that, she worked for Business Insider, Gigaom, and Wired and started her career as a newspaper designer for Gannett.

If you've ever tried to pick up a new fitness routine like running, chances are you may have fallen into the "motivation vs. habit" trap once or twice. You go for a run when the sun is shining, only to quickly fall off the wagon when the weather turns sour.

Similarly, for many businesses, 2020 acted as the storm cloud that disrupted their plans for innovation. With leaders busy grappling with the pandemic, innovation frequently got pushed to the backburner. In fact, according to McKinsey, the majority of organizations shifted their focus mainly to maintaining business continuity throughout the pandemic.

Keep Reading Show less
Gaurav Kataria
Group Product Manager, Trello at Atlassian
Diversity Tracker

The tech industry needs to standardize diversity reports

No tech firm reports diversity the same way. That makes tracking progress harder.

Tech lacks a standard, comprehensive method of reporting and presenting employee demographic data.

Illustration: Christopher T. Fong/Protocol

Diversity reports don't always tell the full story of what representation looks like at tech companies.

The earliest versions of tech industry diversity reports created a binary narrative about diversity and inclusion, according to Bo Young Lee, Uber's chief diversity officer. The reports, which tech companies began consistently releasing in 2014, communicated that "diversity is about gender representation, and it's about race and ethnicity, and it's about nothing else," Lee told Protocol.

Keep Reading Show less
Megan Rose Dickey

Megan Rose Dickey is a senior reporter at Protocol covering labor and diversity in tech. Prior to joining Protocol, she was a senior reporter at TechCrunch and a reporter at Business Insider.

Protocol | Workplace

Introducing Protocol’s Diversity Tracker

Tech companies talk a good game on diversity. Our new tracker shows where there's progress – and where there isn't.

Our tracker contains historical and current diversity data for the most powerful tech companies.
Illustration: Christopher T. Fong/Protocol
Protocol team

A new media company from the publisher of POLITICO reporting on the people, power and politics of tech.

Protocol | Workplace

Productivity apps can’t stop making money

ClickUp had one of the biggest Series C funding rounds ever. Here's how it matches up to the other productivity unicorns.

ClickUp made $400 million in its series C funding round.

Photo: ClickUp

Productivity platform ClickUp announced a milestone today. The company raised $400 million, which is one of the biggest series C funding rounds in the workplace productivity market ever. The round, led by Andreessen Horowitz and Tiger Global, put the private company at a $4 billion valuation post-money.

In case it's not clear: This is a massive amount of money. It shows how hot the productivity space is right now, with some predicting the market size could reach almost $120 billion by 2028. In a world of hybrid workers, all-in-one tool platforms are all the rage among both startups and productivity stalwarts. Companies everywhere want to escape tool overwhelm, where work is spread across dozens of apps.

Keep Reading Show less
Lizzy Lawrence

Lizzy Lawrence ( @LizzyLaw_) is a reporter at Protocol, covering tools and productivity in the workplace. She's a recent graduate of the University of Michigan, where she studied sociology and international studies. She served as editor in chief of The Michigan Daily, her school's independent newspaper. She's based in D.C., and can be reached at llawrence@protocol.com.

Latest Stories