The implementation of information and communication technologies (ICT) in power systems increases the risks of cybersecurity threats, requiring protection measures that should reflect the multi-actor environment of the contemporary power systems. This paper provides a critical assessment of the cybersecurity practices of the transmission system operators (TSOs) from South East Europe (SEE) and the implementation of obligations for TSOs emerging from the complex set of cybersecurity and electricity legislation. The analyses of TSO cybersecurity practices are based on a survey conducted with the TSOs from SEE and show there is a lack of consistent cybersecurity policy at the TSO level. These analyses demonstrate that the differences between TSOs from the SEE region are not very significant with regards to implementation of technical protection and defense measures for critical infrastructures (CIs) and assets. The comprehensive analyses of electricity and cybersecurity legislation uncover the obligations of TSOs emerging from legislation and relate them to current TSO cybersecurity practices, confirming the necessity to boost existing practices. Considering the analyzed legislation and implemented practices, this paper presents a proposal for a cybersecurity framework for TSOs that should improve their organizational and operational response to the evolving cybersecurity challenges.

中文翻译：

---

东南欧输电系统运营商缓解网络安全威胁的程序和实践的概述和改进

电力系统中信息和通信技术 (ICT) 的实施增加了网络安全威胁的风险，需要采取能够反映当代电力系统多参与者环境的保护措施。本文对东南欧 (SEE) 输电系统运营商 (TSO) 的网络安全实践以及复杂的网络安全和电力立法中出现的 TSO 义务的实施进行了重要评估。TSO 网络安全实践的分析基于与 SEE 的 TSO 进行的一项调查，表明 TSO 级别缺乏一致的网络安全政策。这些分析表明，在关键基础设施 (CI) 和资产的技术保护和防御措施的实施方面，来自 SEE 地区的 TSO 之间的差异并不是很大。对电力和网络安全立法的综合分析揭示了立法中 TSO 的义务，并将其与当前的 TSO 网络安全实践联系起来，确认了促进现有实践的必要性。考虑到分析过的立法和实施的实践，本文提出了一项针对 TSO 的网络安全框架的建议，该框架应改善其对不断变化的网络安全挑战的组织和运营响应。对电力和网络安全立法的综合分析揭示了立法中 TSO 的义务，并将其与当前的 TSO 网络安全实践联系起来，确认了促进现有实践的必要性。考虑到分析过的立法和实施的实践，本文提出了一项针对 TSO 的网络安全框架的建议，该框架应改善其对不断变化的网络安全挑战的组织和运营响应。对电力和网络安全立法的综合分析揭示了立法中 TSO 的义务，并将其与当前的 TSO 网络安全实践联系起来，确认了促进现有实践的必要性。考虑到分析过的立法和实施的实践，本文提出了一项针对 TSO 的网络安全框架的建议，该框架应改善其对不断变化的网络安全挑战的组织和运营响应。