IEC 62351 - Power Systems Communication Security 90-2:8: Part 90-2, clauses 7, 8 and 12: evaluation framework, ready techniques (unencrypted TLS, private key sharing) and practical considerations with risk mitigation recommendations

Techniques are evaluated in a common framework; the ready techniques are integrity-only (unencrypted) TLS and sharing the private key with the inspection device, and the practical considerations for each end in recommendations to mitigate the risks they introduce.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 90-2: deep packet inspection of encrypted communications (TR) – IEC 62351 - Power Systems Communication Security

90-2:5 Part 90-2, clauses 4 to 6: monitoring and auditing requirements and the encrypted channels of IEC 62351 (utility and vendor use cases, the recorded-encrypted-call analogy, parts 3, 4 and 6)
90-2:9 Part 90-2, clauses 9 to 11 and 13: techniques needing adaptation (proxy, multi-context TLS middlebox, secure and delayed session-key sharing, application-level mirroring), secure private-key sharing, summary and future challenges

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls