The risk assessment that we performed on high-power consumer IoT equipment shows that such equipment creates a major cybersecurity risk to the stability of the electricity system. Equipment such as PV inverters, heat pumps, batteries, Home Energy Management Systems (HEMS) and EV chargers collectively control large amounts of power. But it is also highly vulnerable to attacks from the internet to the devices and their central platforms. The cybersecurity risk of high-power IoT equipment is not addressed by existing cybersecurity regulations. TSOs and DSOs can, however, help to extend these regulations to mitigate the risks of high-power consumer IoT equipment.
