Cybersecurity Risk Assessment

Status: DRAFT

Scope

EMS Gateway hardware, operating system, EMS Supervisor, VPN connectivity, NATS connectivity, backend device identity and RS485/Modbus control path.

Protected assets

• device credentials
• VPN keys/certificates
• NATS identity and permissions
• inverter control capability
• device configuration
• OTA trust keys
• customer/account association
• telemetry integrity
• audit records

Risk methodology

Probability: Low / Medium / High

Impact: Low / Medium / High / Critical

Residual risk must be accepted explicitly when a control cannot fully mitigate the threat.

Highest-priority areas

1. Device credential extraction / cloning
2. Unauthorized inverter control
3. Software update integrity
4. Backend/device authorization isolation
5. Vulnerability and dependency lifecycle
6. Loss of cloud connectivity / safe local operation

See risk-register.csv for tracked risks.