ČSN EN IEC 62351-8
Řízení energetických soustav a přidružená výměna informací - Bezpečnost dat a komunikací - Část 8: Řízení přístupu na základě role

ČSN EN IEC 62351-8

The scope of this part of IEC 62351 is to facilitate role-based access control (RBAC) for power system management. RBAC assigns human users, automated systems, and software applications (collectively called "subjects" in this document) to specified "roles", and restricts their access to only those resources, which the security policies identify as necessary for their roles.
As electric power systems become more automated and cyber security concerns become more prominent, it is becoming increasingly critical to ensure that access to data (read, write, control, etc.) is restricted. As in many aspects of security, RBAC is not just a technology; it is a way of running a business. RBAC is not a new concept; in fact, it is used by many operating systems to control access to system resources. Specifically, RBAC provides an alternative to the all-ornothing super-user model in which all subjects have access to all data, including control commands.