IEC 62351 - Power Systems Communication Security 90-3:6: Part 90-3, clause 6: information correlation and presentation (collection profiles for NSM and part 7, IEC 61850-specific monitoring, other SNMP objects, logs; events, incidents and correlations; security metrics; risk management platforms)

Collected information is selected through profiles (NSM objects from part 7, IEC 61850-specific monitoring, other SNMP objects, logs), correlated into events and incidents, expressed as security metrics and key performance indicators, and fed to risk management platforms.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 90-3: guidelines for network and system management (TR) – IEC 62351 - Power Systems Communication Security

90-3:5 Part 90-3, clause 5: information collection, filtering and processing (IT and OT elements, SNMP agents, IDS and IPS probes, central NSM platforms, log collection, log agents, normalization, SIEM, other sources)
90-3:7 Part 90-3, clauses 7 and 8: monitoring use cases (substation, DER systems, large hydro, generation) and monitoring profiles for attack scenarios (malicious IED program change, unexpected IEC 61850 configuration, information-gathering malware)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls