Article

The contract specifies a penetration test for the IT/OT infrastructure of a photovoltaic power plant and battery energy storage system to evaluate its cybersecurity resilience. The test will simulate cyberattack scenarios, including unauthorized access and manipulation of energy systems.

It encompasses external and internal testing, assessing communication protocols and network infrastructure such as firewalls and SCADA systems. Active testing will last a minimum of 24 hours and include both automated and manual methods.

Required deliverables include a vulnerability list, severity assessments, and a technical report. The supplier must have relevant experience and security certifications. The implementation is expected by June 2026.