Smart metering security risk assessments

The Government’s smart metering policy will require changes to the existing regulatory and commercial framework governing the electricity and gas markets. The Energy Act 2008 gave the Secretary of State powers to amend existing, or create new, licence conditions and industry codes for the purposes of delivering the Smart Meter Implementation Programme. In April 2012, the Government explained that it was minded to place a specific obligation on suppliers in relation to the security of their end-to-end smart metering systems, through a new licence condition. The intention is that this obligation would cover the period until the Data and Communications Company (DCC) starts to provide services, when there will need to be different arrangements in place. This condition will require suppliers to be responsible for the end-to-end security of their smart metering systems. In fulfilling this obligation, the Government stated that suppliers might also be required to conduct a risk assessment of their end-to-end systems and to have an annual security risk audit conducted by suitably qualified, independent, external specialists. This document presents and considers the specific licence obligations for these existing Government proposals for this early period.

Email: smartmetering@decc.gsi.gov.uk Post: Smart Metering Implementation Programme consultations

Department of Energy and Climate Change

Room M09, 55 Whitehall

London

SW1A 2EY

Consultation on a draft licence condition relating to security risk assessments and audits in the period before the DCC provides services to Smart Meters