Training Course Professional

Critical Infrastructure Protection for Energy

Quantum-safe security architecture for energy sector critical infrastructure: grid, generation, and distribution.

Full day (6 hours)
Certificate on completion

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

For energy CI security teams and infrastructure protection leads. Covers quantum-aware critical infrastructure protection integrating NIST CSF 2.0, IEC 62351, and NERC CIP frameworks. Addresses energy-specific HNDL analysis, OT/IT boundary protection, supply chain cryptographic risk, phased PQC migration strategy, and regulatory trajectory.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 The Quantum Threat to Energy Critical Infrastructure HNDL exposure, attack surface mapping, and threat actor capabilities
2 Framework Integration: NIST CSF 2.0, IEC 62351, and NERC CIP Mapping quantum risk across overlapping compliance obligations
  • NIST Cybersecurity Framework 2.0: where quantum threats intersect Identify, Protect, Detect, Respond, Recover functions and the new Govern function
  • IEC 62351 Parts 3-14: TLS for power system communications, authentication for GOOSE/SV, and where PQC algorithms integrate into the standard
  • NERC CIP-002 through CIP-013: BES Cyber System identification, electronic security perimeters, supply chain risk management, and PQC migration obligations
Break
3 Energy-Specific HNDL Analysis and OT/IT Boundary Protection Where harvest-now-decrypt-later creates the greatest exposure in energy infrastructure
  • HNDL threat prioritisation for energy: SCADA telemetry, market-sensitive generation data, grid topology information, and bilateral contract terms with intelligence shelf lives exceeding 10 years
  • OT/IT boundary architecture: demilitarised zone (DMZ) design between corporate IT and operational networks, data diode deployment, and PQC requirements for cross-boundary communication protocols
  • Supply chain cryptographic risk: firmware signing, secure boot chains, and vendor update mechanisms as quantum attack vectors for embedded energy infrastructure
4 Interactive Demonstration: CI Protection Assessment Full-day format only
  • Facilitator-led walkthrough: conducting a quantum-aware critical infrastructure protection assessment for a representative energy utility architecture
  • Mapping cryptographic dependencies across NIST CSF 2.0 functions, identifying IEC 62351 compliance gaps, and prioritising NERC CIP remediation items
  • Delegates discuss: applying the assessment framework to their own infrastructure, identifying highest-risk cryptographic dependencies and first migration candidates
Break
5 Migration Strategy and Supply Chain Governance Building a phased PQC transition programme for energy CI
  • Phased migration architecture: prioritising IT/OT boundary protections, then SCADA/EMS communications, then field device firmware, aligned with planned outage windows and asset replacement cycles
  • Supply chain governance: incorporating NIST FIPS 203/204/205 requirements into vendor procurement, firmware update contracts, and NERC CIP-013 compliance programmes
  • Incident response adaptation: updating energy sector incident response plans for quantum-era scenarios including cryptographic compromise of safety systems
6 Regulatory Trajectory and Sector Collaboration Preparing for quantum-specific CI compliance requirements
  • Regulatory horizon scanning: anticipated quantum-specific requirements from FERC, NERC, EU NIS2, and national energy regulators
  • Sector collaboration models: E-ISAC, CESER, and ENISA energy sector threat intelligence sharing for quantum threat indicators
  • Board-level communication: translating quantum CI risk into executive language for investment case preparation and regulatory engagement
7 Q&A and Protection Roadmap Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us