Information security assurance in critical infrastructures: Smart metering case

In recent years the operations of critical infrastructures have witnessed rapid developments in the way these services are being implemented and delivered to consumers. One of the major transformations in these infrastructures is the adaptation of the latest developments in the information and communication technologies, an example of this is Smart Metering in the energy sector. However, to ensure a successful operation of smart metering service, a number of factors must be taken into consideration, one of which is the assurance of metering-related information security. Our goal is this paper is to explore in what ways the information security assurance can be incorporated in the design, operation and maintenance processes of the smart metering infrastructure, and how security policies and models can be shaped to define the roles and information access privileges of the different actors.