*3.1.3 Define the objective of the validation-evaluation process*

The main objectives of the evaluation process will be to study the acceptance of the SecureGas system (at the strategic, tactical and operational levels), assess the performance of its components and the operational potential of the developed solution.

The beneficiaries of the validation and evaluation process are both technical component providers and CI operators. The technical providers will receive valuable feedback on technical development, components adaptation and implementation, system integration and cooperation with legacy systems, etc.. The CI operators will receive the performance assessment analysis of SecureGas solution, the extracted lessons, recommendations and conclusions, and all knowledge that can be transferred to their operations.

### *3.1.4 Identify adequate criteria*

The criteria for validation can be clustered into two categories, further analyzed in Section 4:


As such, the validation process will generate feedback during the pilot demonstrations on the following dimensions: functional, interface, security, operational, design, and implementation.

When it comes to the specific criteria, the SecureGas partners will make use of the lists of user (organizational, operational and regulatory) and technical (and standards-related) requirements defined, in order to determine whether the SecureGas system offers what it was designed to. As far as verification is concerned, the system specifications developed by technical partners will play the same role as user requirements in validation (see **Figure 1**). The evaluation process will also assess whether the SecureGas system complies with the technical requirements developed in Phase 1 of the project.

#### **3.2 Plan the business case**

This second part consists of a number of substeps that will lead in the realization of the BC implementation.

#### *3.2.1 Type, location and schedule*

In each SecureGas BC, an operational based demonstration will take place in the field (for the production, transport and distribution phases of gas lifecycle), aiming to simulate scenarios as realistically as possible in a controlled environment. This method of BC implementation will offer the advantage of real-time decisions and actions by the end-users and other participating actors, generating responses and leading to several consequences depending on the participants' actions and system performance. On top of that, regarding the strategic level of Gas lifecycle, a discussion-based approach will be followed, through the organization of a workshop/tabletop exercise, during which key personnel of the CI will have the chance to discuss scenarios that involve strategic threats and will assess policies, procedures, standard operating procedures and potential mitigation measures.

The locations may be related to the assets involved, the objectives and requirements of the validation, etc. Within SecureGas, the CI operators' sites in Greece, Lithuania and Italy have been selected and included in the scenarios based on the type of their installations.

Within the SecureGas project, project partners will customize, integrate and deploy the provided technical components into each BC. The deployment of the

**135**

*Validation Strategy as a Part of the European Gas Network Protection*

extended and integrated components in the BC will be tested through piloting activities for a period lasting almost one year period, with the last months focusing on the evaluations leading to an overall report based on the data and information

methodological substeps have been specified to define the scenarios:

Substep 3: Involved stakeholders and pilot actors.

Substep 6: Deployment of the SecureGas solution.

BCs are based on scenarios that correspond to a sequence of facts occurring in a specific space–time framework. Scenarios should be structured in a logical, readily accessible way to the pilot actors. Within SecureGas BCs, scenarios consist of events designed to guide the actors towards achieving the BC objectives. Six specific

Substep 1: Identification of normative, institutional and legislation frameworks. Substep 2: Identification of end-user's infrastructures, assets and pilot site

The criteria used for the validation/evaluation of the SecureGas system and each component, consist of cross KPIs and specific KPIs (all linked with the end user requirements and technical specifications). In Section 4.1, these criteria will be

In the framework of the validation plan, the methods and tools for the evaluation

needs have been selected. Thus, the following substeps are executed for each BC:

2.Define how, through discussion-based workshop/tabletop exercise for the strategic level, and operations-based simulations/field pilots for the tactical/

3.Define who are involved in the frame of the evaluation, sorted into three main

• CI operators, security liaison officers, administrators and managers who can provide input based on an operational, policy and technical point of view, and evaluate the overall performance based on their experience.

• First responders, who can provide input regarding the information sharing

• Security practitioners and stakeholders, who, depending on their expertise, will provide information concerning the potential exploitation and use of the SecureGas solution. They may provide feedback on their willingness to use or adopt the system, other technical/operational comments, etc.

1.Define what has to be measured for based on applicable KPIs.

and community awareness during an incident.

*DOI: http://dx.doi.org/10.5772/intechopen.94644*

attributes.

Substep 4: Considered threats and risk. Substep 5: Unfolding the scenario.

*3.2.4 Select validation/evaluation method and tools*

collected.

*3.2.2 Define scenarios*

*3.2.3 Analyze criteria*

discussed in detail.

operational level.

groups as follows:

extended and integrated components in the BC will be tested through piloting activities for a period lasting almost one year period, with the last months focusing on the evaluations leading to an overall report based on the data and information collected.
