• 1 Introduction
  • 1.1 The Project
  • 1.2 Project Goals
  • 1.3 Report Structure
  • 1.4 Project Team
  • 2 Context
  • 2.1 The European Energy Supply System
  • 2.1.1 Dependency and Interconnectedness
  • 2.1.2 Critical Energy Infrastructures
  • 2.1.3 The Energy-ICT Interface
  • 2.2 EU Activities to date in the field of Critical Infrastructure Protection and Cyber Security
  • 2.2.1 Critical Infrastructure Protection
  • 2.2.2 European Programme for Critical Infrastructure Protection
  • 2.2.3 Directive on the Identification and Designation of European Critical Infrastructure and the assessment of the need to improve their protection
  • 2.2.4 Critical Infrastructure Warning Information Network
  • 2.2.5 European Cyber Security Policy
  • 2.3 The Rationale for Developing a Programme of Risk Governance for the ICT-Energy Sector
  • 3 Methodology
  • 3.1 Tasks
  • 3.1.1 Literature Review
  • 3.1.2 Project Workshop 1
  • 3.1.3 Stakeholder Workshop 1
  • 3.1.4 Stakeholder Questionnaire
  • 3.1.5 Related EC activities
  • 3.1.6 Development of the Risk Governance Framework
  • 3.1.7 Stakeholder Workshop 2
  • 4 Analysis
  • 4.1 Literature Review
  • 4.2 Project Workshop
  • 4.3 Stakeholder Workshop 1
  • 4.4 Questionnaire
  • 4.5 Related EC Activities
  • 4.6 Stakeholder Workshop 2
  • 5 Risk Governance Framework
  • 5.1 Introduction for Member States
  • 5.1.1 Background
  • 5.1.2 Purpose
  • 5.1.3 Potential interested stakeholders
  • 5.2 The context of the Risk Governance Framework
  • 5.2.1 Scope
  • 5.2.2 Clarification: Use of framework for cross-border and cross-boundary ICT/energy interfaces
  • 5.2.3 Outline
  • 5.2.4 Roles and Responsibilities
  • 5.3 Pre-assessment Phase
  • 5.4 Appraisal phase
  • 5.5 Characterisation and Evaluation Phase
  • 5.6 Management phase
  • 5.7 Outputs
  • 6 Conclusions and Recommendations
  • 6.1 Conclusions
  • 6.2 Recommendations and next steps
  • 7 Glossary
  • Annexes