Cyber Risk Digital Substation

CYBER-SECURITY & RISK MANAGEMENT PLATFORM

Incident Status: ACTIVE - CRITICAL

Physical infrastructure + cyber context

10:24:35Data injection incident confirmed

Cyber-physical risk overlay

Selected: RTU_03Click an asset to inspect

scenario estimate

Expected loss$320KCurrent scenario

P90$730KResidual exposure

P99$1.25MTail risk

Monte Carlo · 10,000 runs

Mean

P90

P99

$0$500K$1M$1.5M$2M

Projected loss (USD)

Projection uncertaintyModerateRanges reflect scenario uncertainty, not measured outcomes.

SELECTED ASSET

Remote Terminal Unit

CRITICAL

Risk score96/100

Loss range$230K - $510K

Baseline behavior

Engineering Station normally opens short, authenticated IEC-104 maintenance sessions with low command frequency.

Observed deviation

Persistent control session, elevated command rate, and an OPEN command outside the expected operator workflow.

Physical context

Supervises bay control and provides the bridge between cyber control traffic and field equipment.

ObservedUnexpected IEC-104 control traffic reaches RTU_03 from the engineering station.

InferredRTU_03 is the most likely cyber-physical pivot in the incident path.

ProjectedLoss of trustworthy control may delay restoration and propagate uncertainty to connected equipment.

Projected recovery after actions: 8.7 h

0/5

Residual risk 85/100Risk ↓ 0Loss avoided $0K