DD IEC/TS 62351-1:2007

1 Scope and object
  1.1 Scope
  1.2 Object
2 Normative references
3 Terms, definitions and abbreviations
4 Background for information security standards
  4.1 Rationale for addressing information security in
       power system operations
  4.2 IEC TC 57 data communications protocols
  4.3 History of the Development of these Security
       Standards
5 Security issues for the IEC 62351 series
  5.1 General information on security
  5.2 Types of security threats
  5.3 Security requirements, threats, vulnerabilities,
       attacks, and countermeasures
  5.4 Importance of security policies
  5.5 Security risk assessment
  5.6 Understanding the security requirements and impact of
       security measures on power system operations
  5.7 Five-step security process
  5.8 Applying security to power system operations
6 Overview of the IEC 62351 series
  6.1 Scope of the IEC 62351 series
  6.2 Authentication as key security requirement
  6.3 Objectives of the IEC 62351 series
  6.4 Relationships between the IEC 62351 parts and IEC
       protocols
  6.5 IEC 62351-1: Introduction
  6.6 IEC 62351-2: Glossary of terms
  6.7 IEC 62351-3: Profiles including TCP/IP
  6.8 IEC 62351-4: Security for profiles that include MMS
  6.9 IEC 62351-5: Security for IEC 60870-5 and derivatives
  6.10 IEC 62351-6: Security for IEC 61850 Profiles
  6.11 IEC 62351-7: Security through network and system
       management
7 Conclusions
Bibliography

Gives an introduction to the remaining parts of the standard, primarily to introduce the reader to various aspects of information security as applied to power system operations.

The scope of the IEC 62351 series is information security for power system control operations. The primary objective is to “Undertake the development of standards for security of the communication protocols defined by IEC TC 57, specifically the IEC 60870-5 series, the IEC 60870-6 series, the IEC 61850 series, the IEC 61970 series, and the IEC 61968 series. Undertake the development of standards and/or technical reports on end-to-end security issues.”