*3.2.2 Define scenarios*

*Issues on Risk Analysis for Critical Infrastructure Protection*

transferred to their operations.

*3.1.4 Identify adequate criteria*

design, and implementation.

developed in Phase 1 of the project.

**3.2 Plan the business case**

of the BC implementation.

type of their installations.

*3.2.1 Type, location and schedule*

in Section 4:

The beneficiaries of the validation and evaluation process are both technical component providers and CI operators. The technical providers will receive valuable feedback on technical development, components adaptation and implementation, system integration and cooperation with legacy systems, etc.. The CI operators

extracted lessons, recommendations and conclusions, and all knowledge that can be

The criteria for validation can be clustered into two categories, further analyzed

• General criteria, that apply to the whole SecureGas system (cross-KPIs) and

As such, the validation process will generate feedback during the pilot demonstrations on the following dimensions: functional, interface, security, operational,

When it comes to the specific criteria, the SecureGas partners will make use of the lists of user (organizational, operational and regulatory) and technical (and standards-related) requirements defined, in order to determine whether the SecureGas system offers what it was designed to. As far as verification is concerned, the system specifications developed by technical partners will play the same role as user requirements in validation (see **Figure 1**). The evaluation process will also assess whether the SecureGas system complies with the technical requirements

This second part consists of a number of substeps that will lead in the realization

In each SecureGas BC, an operational based demonstration will take place in the field (for the production, transport and distribution phases of gas lifecycle), aiming to simulate scenarios as realistically as possible in a controlled environment. This method of BC implementation will offer the advantage of real-time decisions and actions by the end-users and other participating actors, generating responses and leading to several consequences depending on the participants' actions and system performance. On top of that, regarding the strategic level of Gas lifecycle, a discussion-based approach will be followed, through the organization of a workshop/tabletop exercise, during which key personnel of the CI will have the chance to discuss scenarios that involve strategic threats and will assess policies, procedures,

The locations may be related to the assets involved, the objectives and requirements of the validation, etc. Within SecureGas, the CI operators' sites in Greece, Lithuania and Italy have been selected and included in the scenarios based on the

Within the SecureGas project, project partners will customize, integrate and deploy the provided technical components into each BC. The deployment of the

standard operating procedures and potential mitigation measures.

• Specific criteria that apply to individual components of the system.

will receive the performance assessment analysis of SecureGas solution, the

**134**

BCs are based on scenarios that correspond to a sequence of facts occurring in a specific space–time framework. Scenarios should be structured in a logical, readily accessible way to the pilot actors. Within SecureGas BCs, scenarios consist of events designed to guide the actors towards achieving the BC objectives. Six specific methodological substeps have been specified to define the scenarios:

Substep 1: Identification of normative, institutional and legislation frameworks. Substep 2: Identification of end-user's infrastructures, assets and pilot site attributes. Substep 3: Involved stakeholders and pilot actors. Substep 4: Considered threats and risk. Substep 5: Unfolding the scenario. Substep 6: Deployment of the SecureGas solution.
