Estudio Técnico Comparativo para la Selección de Equipos y Arquitecturas de Ciberseguridad IT/OT en EBSA, Basado en las Normas IEC62443 e IEC62351

Abstract

The digital transformation of the electric power sector has accelerated the convergence of Information Technology (IT) and Operational Technology (OT), improving operational efficiency while increasing the exposure of critical infrastructures to cyber threats. In this context, this research presents a comparative technical study for the selection of cybersecurity equipment and architectures applicable to IT/OT environments, based on the guidelines established by IEC 62443 and IEC 62351 standards.

The proposed methodology was structured into five sequential phases: documentary review and regulatory analysis, conceptual characterization of IT and OT environments, definition of technical evaluation criteria, comparative assessment of cybersecurity alternatives, and the proposal of a reference architecture validated through a simulated environment using GNS3. The study identified critical assets and information flows within a typical electrical distribution substation, developed a weighted evaluation matrix based on technical, operational, and feasibility criteria, and analyzed representative cybersecurity solutions without prioritizing specific vendors.

The results demonstrate that network segmentation, access control, and secure communications are fundamental mechanisms for reducing the cyberattack surface in electrical infrastructures. Furthermore, the proposed reference architecture provides a technical framework aligned with the defense-in-depth principles of IEC 62443 and the communication security mechanisms defined in IEC 62351, supporting informed decision-making for the progressive implementation of cybersecurity strategies in electric utilities such as Empresa de Energía de Boyacá (EBSA).