This document provides a plan to electric vehicle (EV) charging stations against the EV Charging System Security Requirements, version 1.01 of August 2017, developed by ElaadNL and ENCS.
When the requirements are used, the need arises to evaluate the charging station against the requirements. Most procurement processes include acceptance testing to make sure that the selected charging station does indeed meet all requirements. This document provides a standardized test plan to evaluate the charging stations against the security requirements developed by ElaadNL and ENCS in 2017.
By standardizing the test plan, the test results can be shared between charge point operators. The vendor of the charging station can order a security test according to the test plan. If the charging station passes the tests, the vendor can use the test report to show compliance in all tenders that use the security requirements. This is expected to reduce the cost of testing and can give charge point operators assurance in advance that there are charging stations meeting the requirements.
If the vendor’s equipment provides additional security features, then this plan can be extended to include specific testing steps for the corresponding requirements.
The test plan consists of three phases:
Functional tests and a vulnerability assessment by the vendor, usually performed during development;
A review of development processes and security design and OCPP security conformance testing by an external lab;
A penetration test by an external lab.