IEC 62351 - Power Systems Communication Security 10:5: Part 10, clause 5: security architecture in power systems (security domains and their mapping, system interface categories, security controls and their domain mapping, determination of controls, network-based controls)

The security architecture is built from security domains mapped onto power system domains, system interface categories mapped onto the TC 57 architecture, and security controls (the Figure 9 overview) mapped to domains, with a method to determine the controls a system needs and the network-based controls (segmentation, firewalls, VPNs, intrusion detection) that complement the protocol security of parts 3 to 6.