The Challenge
The Glenrowan Solar Farm — a 130 MW solar project located near Wangaratta in regional Victoria — operates a SCADA environment that is critical to the safe generation and dispatch of electricity to the grid. As a participant in Australia’s energy sector, the asset owner faced a regulatory obligation to demonstrate compliance with the Australian Energy Sector Cyber Security Framework (AESCSF). UGL, engaged on the project, needed a specialist cyber security partner to lead a rigorous, standards-based risk assessment and produce the compliance evidence required to satisfy the framework.
The Solution
UGL contracted L2iQ to lead the cyber security risk assessment for the solar farm’s SCADA environment, following the IEC 62443 risk assessment methodology. L2iQ’s work spanned the full scope of AESCSF compliance — from defining the System Under Consideration and identifying threats and vulnerabilities, through to producing the evidence package required to demonstrate compliance with the framework.
By applying IEC 62443 rigour to the SCADA environment, L2iQ equipped UGL and the asset owner with a clear, prioritised understanding of cyber security risk — and a defensible path to compliance.
What L2iQ Delivered
| AESCSF Compliance | IEC 62443 Risk Assessment | Reporting & Outcomes |
| • AESCSF gap analysis for SCADA environment • Compliance evidence gathering and documentation • AESCSF compliance reporting • Remediation roadmap aligned to framework requirements | • System Under Consideration (SuC) definition • Threat and vulnerability identification for SCADA • Risk assessment workshops with key stakeholders • Risk register development and scoring | • Prioritised risk register for mitigation planning • Cyber security recommendations for SCADA environment • Compliance evidence package for AESCSF submission • Clear understanding of cyber risk posture for UGL |
The Outcome
L2iQ delivered a structured, evidence-based compliance outcome that gave UGL and the asset owner confidence in their cyber security posture and a clear pathway to meet AESCSF obligations. The IEC 62443 risk assessment provided a prioritised view of risk across the SCADA environment, enabling UGL to direct mitigation activities where they matter most. The compliance evidence package produced by L2iQ formed the basis for demonstrating adherence to the framework — meeting the obligations of a regulated energy sector participant.