Towards a Quantitative Holistic Cybersecurity Assessment of Energy Systems

This work-in-progress paper presents a concept for a holistic cybersecurity analysis. The proposed approach is designed to enable a quantitative assessment of the cybersecurity posture of an energy system, based on knowledge of its assets and their interconnections. Identified vulnerabilities are reported and categorized, while corresponding mitigation suggestions are collected and validated. At present, cybersecurity assessments in this domain still rely heavily on expert judgment, leading to subjective evaluations that hinder comparability and objectivity. To address this, the proposed approach aims to systematize and automate the analysis process. This paper is published at an early stage to actively invite feedback and foster community involvement, as broad expert input is essential to improve the quality, robustness, and acceptance of the approach. This paper documents a research project aimed at providing grid operators with an analysis tool to support decision-making in the future.