Defending our
electric infrastructure
Wind, solar, storage and networks at the core — and now data centres, telco, transport and AI as coupled systems.
Defending civilian critical infrastructure now demands a level of knowledge of power systems, control systems and supply chain that demands that cyber and risk are managed in an integrated way.
Five sectors, increasingly coupled
Grid infrastructure no longer has a clear boundary. Securing the electricity system now means securing the systems it depends on.
Electricity
Generation, storage, transmission and distribution and retail — defending wind, solar and BESS, and the networks by which they connect - this is where CAPA security in-depth approach begins.
And our reach into adjacent sectors...
Data centres
The compute the sector now runs on, and a major new point loads in our grids.
Telco
The networks carrying control, protection and market signals between every part of the system.
Transport
Electrified fleets and charging infrastructure, connecting at the grid edge in their millions.
AI
Increasingly a dependency for operations, and one that has to be securely sandboxed.
One capability set, delivered three ways
Start with a short advisory, and leverage our products to streamline your implementation.
Across the whole supply chain
Networks
Transmission and distribution businesses meeting SOCI and CIRMP obligations.
Generation & storage
Wind, solar and BESS operators, from design through to operation.
Retailers & markets
Retailers running distributed fleets, and market operators.
OEMs & integrators
Product vendors demonstrating assurance to their operator customers.
Analysis from the front line
14 Oct 2026
FOCI: an explainer on foreign ownership, control or influence
From June 2027, foreign ownership, control or influence is a named risk in every critical electricity asset's risk management program. It isn't a ban on brands or countries. It's a process: understand the risk, decide what to do about it, and keep the evidence. What the rules ask for, what mitigation really costs, and why good records are the cheapest insurance you can buy.
11 Oct 2026
Leaving the door open: what happens when remote access security fails
Two critical Citrix NetScaler alerts in one month, a run of exploited Fortinet flaws, and Dragos reporting that 73% of its OT incident response cases involved VPNs or jump hosts. The front door into critical infrastructure will keep failing. What dictates the extent of the damage is whether the layers behind it are truly independent, and whether anyone notices an intruder in the landing zone before they move deeper into the system.
9 Oct 2026
Hints for using AI for renewables data analytics
Plenty of renewables teams are starting to use AI to make sense of their operating data. A few simple habits, a sensible sandbox, and an eye on what data goes in and out will keep those projects safe, and keep you on the right side of SOCI.
Secure by Design
Security built in for life
Security designed in from project inception is both more secure and lower cost.