The future’s green energy production is critical infrastructure – and an obvious target of cyber attacks

Statkraft is the largest energy concern in Norway and with a green energy production of 65 TWh, they are also Europe’s largest producer of renewable energy. The company has a special position within hydropower with more than 100 years’ experience. However, they also produce energy-based power by means of wind power, solar energy, gas-fired electricity, biomass, and district heating. Statkraft is a global company within energy production and has 4600 employees in 18 countries in Europe, South America, and Asia.

Today 92% of Statkraft’s production is based on renewable energy but globally it is just 20%. This Statkraft would like to change. The company invests globally to increase its renewable energy production from water, wind, and the sun. Norway has a leading position in the distribution of electric cars as well as the development of green hydrogen.

As an energy producer, Statkraft is a crucial participant in the critical infrastructure. Long ago, criminals, theorists and other vicious persons realised that an attack on energy production is an attack on the whole society. Tone Thingbø is as Vice President Cyber Security in charge of Statkraft’s efforts to ensure information security within the company. In her presentation she tells about her experiences with handling this task globally. She also talks about the global ISO 27001 standard and how it can be a tool to a systematic approach to information security. Finally, she will give good advice to others who wish to improve their cybersecurity efforts.

Kari-Anne Larmerud, Information Security Responsible, CISO, Statkraft