Case Study: EPZ Nuclear Power Plant Borssele strengthens cybersecurity and compliance with CGI

EPZ Nuclear Power Plant Borssele streamlines risk assessment with CGI using Attack Tree and MITRE ATT&CK

EPZ Nuclear Power Plant Borssele, a nuclear power plant in the Netherlands, faced a mandate from the Dutch regulator to conduct comprehensive risk analyses of its IT and operational technology systems. The challenge was to identify critical cybersecurity vulnerabilities in its legacy, air-gapped infrastructure with a practical and scalable approach. CGI was engaged to address this challenge.

CGI developed a targeted risk analysis framework using the Attack Tree methodology to pinpoint critical vulnerabilities efficiently. They further created a tool that mapped the analysis to the MITRE ATT&CK framework and CIS Controls, providing detailed mitigation measures. This solution provided EPZ with faster risk assessments, an improved security posture, and ensured regulatory compliance. CGI's work also laid the foundation for the plant's future digital modernization.

EPZ Nuclear Power Plant Borssele