In the UK, gas and electricity network price controls are set by the Office of Gas and Electricity Markets (Ofgem) using the RIIO framework. RIIO, which stands for Revenue = Incentives + Innovation + Outputs. RIIO- 2, the successor to the original 2013 RIIO, begins in 2021.
Under RIIO-2, network companies must submit Business Plans for approval. Ofgem has issued a set of Cyber Resilience Guidelines to help network companies implement proper technical and organisational methods to manage risks to the security of the network.
This white paper is intended to assist network companies build cyber resilience plans in response to the RIIO-2 requirements.