Securing the grid: Siemens Energy will launch a cybersecurity service for the energy industry

The energy industry is embracing digital technology, but cybersecurity can be an afterthought at smaller companies. However, small security incidents can quickly turn into big problems.

Power lines

Utilities might know how to secure their physical equipment against outside threats, but they don't necessarily have the same skills on their payroll when it comes to cybersecurity.

Photo: Fré Sonneveld/Unsplash

Siemens Energy is hitting the ground running during its first week as a standalone company, announcing plans for a modern cybersecurity service designed for the small- and medium-size energy companies that increasingly rely on digitized equipment.

The Managed Detection and Response service will be unveiled Thursday morning during a virtual event hosted by the Atlantic Council. It promises to scan and monitor the breadth of digital equipment used by utilities, power distributors and energy generation companies for security threats and advise those customers on appropriate responses, said Leo Simonovich, vice president and global head of industrial cyber and digital security for Siemens Energy, in an exclusive interview with Protocol.

"What we wanted to do was to help address the essential problem of visibility, the basic premise that you cannot protect what you cannot see," Simonovich said.

As utilities around the world have introduced a greater mix of renewable energy sources into their systems and started their own version of the digital transformation efforts well underway in other parts of the economy, they often layer newer technology upon older systems and equipment that wasn't designed for the digital age. Those utilities might know how to secure their physical equipment against outside threats, but they don't necessarily have the same skills on their payroll when it comes to cybersecurity, Simonovich said.

That means the "attack surface" — the opportunities for cybersecurity threats created by adding more software to the mix — of a modern utility has increased quite a bit.

"With each new node, each new device being connected to the energy system, we're experiencing an opportunity, but we're introducing a potential pathway for an attacker to disrupt," Simonovich said.

Siemens' MDR system gathers data from software that runs large industrial machines as well as data running across traditional information networks to paint a baseline picture of "normal" activity at an energy company. It then uses machine-learning techniques to detect and respond to abnormal levels of activity, advising customers on the best course of action.

Machine learning is the buzzword du jour in cybersecurity, with some justification. The sheer volume of threats to modern digital systems grows every day, and it's nearly impossible for any human being to stay on top of that much activity. Security companies large and small are increasingly selling services that use powerful computers to recognize patterns and detect anomalies, reserving human interaction for only the most serious threats.

Larger companies with bigger budgets often have similar systems already in place, but Siemens Energy is targeting this service at companies that haven't been able to afford the software or talent required to operate such a system, Simonovich said.

"We are only as strong as our weakest link," he said. "Because of increased interdependence between large and small utilities, many of the attacks that we've seen have started with a small utility and cascaded out to the whole system."

Siemens' service will require a three-year subscription, and it will take a few months for the system to sketch a portrait of an energy company's footprint and determine a baseline level of activity, Simonovich said. Costs will be based on the number of power plants, substations or other key pieces of equipment that make up an energy company's infrastructure.

Shares of Siemens Energy made their debut on the Frankfurt stock market on Monday. The company, which makes industrial power-generation equipment used by around 20% of the world's energy companies, has around 91,000 employees.


The minerals we need to save the planet are getting way too expensive

Supply chain problems and rising demand have sent prices spiraling upward for the minerals and metals essential for the clean energy transition.

Critical mineral prices have exploded over the past year.

Photo: Andrey Rudakov/Bloomberg via Getty Images

The newest source of the alarm bells echoing throughout the renewables industry? Spiking critical mineral and metal prices.

According to a new report from the International Energy Agency, a maelstrom of rising demand and tattered supply chains have caused prices for the materials needed for clean energy technologies to soar in the last year. And this increase has only accelerated since 2022 began.

Keep Reading Show less
Lisa Martine Jenkins

Lisa Martine Jenkins is a senior reporter at Protocol covering climate. Lisa previously wrote for Morning Consult, Chemical Watch and the Associated Press. Lisa is currently based in Brooklyn, and is originally from the Bay Area. Find her on Twitter ( @l_m_j_) or reach out via email (ljenkins@protocol.com).

Sponsored Content

Why the digital transformation of industries is creating a more sustainable future

Qualcomm’s chief sustainability officer Angela Baker on how companies can view going “digital” as a way not only toward growth, as laid out in a recent report, but also toward establishing and meeting environmental, social and governance goals.

Three letters dominate business practice at present: ESG, or environmental, social and governance goals. The number of mentions of the environment in financial earnings has doubled in the last five years, according to GlobalData: 600,000 companies mentioned the term in their annual or quarterly results last year.

But meeting those ESG goals can be a challenge — one that businesses can’t and shouldn’t take lightly. Ahead of an exclusive fireside chat at Davos, Angela Baker, chief sustainability officer at Qualcomm, sat down with Protocol to speak about how best to achieve those targets and how Qualcomm thinks about its own sustainability strategy, net zero commitment, other ESG targets and more.

Keep Reading Show less
Chris Stokel-Walker

Chris Stokel-Walker is a freelance technology and culture journalist and author of "YouTubers: How YouTube Shook Up TV and Created a New Generation of Stars." His work has been published in The New York Times, The Guardian and Wired.


The 911 system is outdated. Updating it to the cloud is risky.

Unlike tech companies, emergency services departments can’t afford to make mistakes when migrating to the cloud. Integrating new software in an industry where there’s no margin for error is risky, and sometimes deadly.

In an industry where seconds can mean the difference between life and death, many public safety departments are hesitant to take risks on new cloud-based technologies.

Illustration: Christopher T. Fong/Protocol

Dialing 911 could be the most important phone call you will ever make. But what happens when the software that’s supposed to deliver that call fails you? It may seem simple, but the technology behind a call for help is complicated, and when it fails, deadly.

The infrastructure supporting emergency contact centers is one of the most critical assets for any city, town or local government. But just as the pandemic exposed the creaky tech infrastructure that runs local governments, in many cases the technology in those call centers is outdated and hasn’t been touched for decades.

Keep Reading Show less
Aisha Counts

Aisha Counts (@aishacounts) is a reporter at Protocol covering enterprise software. Formerly, she was a management consultant for EY. She's based in Los Angeles and can be reached at acounts@protocol.com.


'The Wilds' is a must-watch guilty pleasure and more weekend recs

Don’t know what to do this weekend? We’ve got you covered.

Our favorite things this week.

Illustration: Protocol

The East Coast is getting a little preview of summer this weekend. If you want to stay indoors and beat the heat, we have a few suggestions this week to keep you entertained, like a new season of Amazon Prime’s guilty-pleasure show, “The Wilds,” a new game from Horizon Worlds that’s fun for everyone and a sneak peek from Adam Mosseri into what Instagram is thinking about Web3.

Keep Reading Show less
Janko Roettgers

Janko Roettgers (@jank0) is a senior reporter at Protocol, reporting on the shifting power dynamics between tech, media, and entertainment, including the impact of new technologies. Previously, Janko was Variety's first-ever technology writer in San Francisco, where he covered big tech and emerging technologies. He has reported for Gigaom, Frankfurter Rundschau, Berliner Zeitung, and ORF, among others. He has written three books on consumer cord-cutting and online music and co-edited an anthology on internet subcultures. He lives with his family in Oakland.


Work expands to fill the time – but only if you let it

The former Todoist productivity expert drops time-blocking tips, lofi beats playlists for concentrating and other knowledge bombs.

“I do hope the productivity space as a whole is more intentional about pushing narratives that are about life versus just work.”

Photo: Courtesy of Fadeke Adegbuyi

Fadeke Adegbuyi knows how to dole out productivity advice. When she was a marketing manager at Doist, she taught users via blogs and newsletters about how to better organize their lives. Doist, the company behind to-do-list app Todoist and messaging app Twist, has pushed remote and asynchronous work for years. Adegbuyi’s job was to translate these ideas to the masses.

“We were thinking about asynchronous communication from a work point of view, of like: What is most effective for doing ambitious and awesome work, and also, what is most advantageous for living a life that feels balanced?” Adegbuyi said.

Keep Reading Show less
Lizzy Lawrence

Lizzy Lawrence ( @LizzyLaw_) is a reporter at Protocol, covering tools and productivity in the workplace. She's a recent graduate of the University of Michigan, where she studied sociology and international studies. She served as editor in chief of The Michigan Daily, her school's independent newspaper. She's based in D.C., and can be reached at llawrence@protocol.com.

Latest Stories