본문바로가기 상단주메뉴 바로가기

KETEP 세계에너지시장정보

닫기

정책동향보고서

제목 EU) 배터리 에너지저장장치의 사이버보안: 가치사슬 전반의 역할·책임과 규제 공백
국가 [EU]  출처 Energy Storage Europe
산업구분 [에너지효율]  등록일 2026.10.07
본 보고서는 유럽 BESS 설비가 현재 50GW에서 2030년 200GW로 확대되는 가운데 사이버복원력법(CRA)·사이버보안 네트워크코드(NCCS)·사이버보안법 2.0의 방향은 지지하되 레거시 자산·외주 운영·SPV 구조·EU 법인 없는 제조사에 대한 책임 공백과 회원국별로 다른 NIS2 이행이 비용을 높이고 보급을 지연시킨다고 지적하며 BMS·PCS·EMS 등 계통 제어 구성요소에 집중하는 위험 기반·부품 단위 접근과 EU 차원의 조화를 제안한 보고서이다.
원문 제목 및 목차
제목 :
Cybersecurity in Battery Energy Storage Systems: Roles, Responsibilities, and Regulatory Gaps Across the Value Chain
원문목차 :
1. Introduction.......................................................................................................................... 8

2. BESS Landscape, Value Chain & Cyber Functions ...................................................................... 9
 2.1 Battery Energy Storage System Definition.............................................................................................. 9
 2.2 Core Hardware Components................................................................................................................. 10
 2.2 Key Software and Communication Layers ................................................................................................ 12
 2.3 Why This Architecture Creates Cybersecurity Complexity ................................................................... 12
 2.4 Key Actors in the BESS Value Chain....................................................................................................... 13
 2.5 Lifecycle Phases..................................................................................................................................... 14
 2.6 Deployment Models & Risk Classification............................................................................................. 14

3. Responsibility Mapping Across the Lifecycle & Actors.............................................................. 18
 3.1 Responsibility Matrix ............................................................................................................................. 18
 3.2 Technology Responsibilities (CRA + CSA).............................................................................................. 19
 3.3 Process Responsibilities (NIS 2 + NCCS)................................................................................................ 20

4. Regulatory Mapping & Accountability .................................................................................... 22
 4.1 Primary Legislative Pillars and Interactions ......................................................................................... 22
 4.2 Key Definitions Under the Framework.................................................................................................. 22
 4.3 Applicability Matrix ................................................................................................................................ 23
 
5. Challenges & Gaps ............................................................................................................... 27
 5.1 Coordination Opportunities Within the Existing Framework ............................................................... 27
 5.2 Harmonisation Failures and Their Consequences................................................................................ 27
 5.3 Specific Gaps Requiring Urgent Resolution .......................................................................................... 27
 5.4 Transparency Around Emerging ITC Supply Chain Risk Management................................................. 28

6. Recommendations............................................................................................................... 29
 6.1 Recommendations for the Industry ...................................................................................................... 29
  6.1.1 Asset Owners and Operators..........................................................................................29
  6.1.2 OEMs and System Integrators........................................................................................29
  6.1.3 EPCs and Installers .........................................................................................................30
  6.1.4 System Operators, Aggregators, and Service Providers ...............................................30
 6.2 Policy Recommendations for the EU..................................................................................................... 30

7. References and Sources........................................................................................................ 32
※ 본 정보는 게시일로부터 수정/변경될 수 있으므로, 정확한 내용은 아래 출처의 링크를 통해 확인하시기 바랍니다.
쿠키를 지원하지 않는 브라우저이거나 브라우저 설정에서 쿠키를 사용하지 않음으로 설정되어 있는 경우 사이트의 일부 기능(로그인 등)을 이용할 수 없으니 유의해 주시기 바랍니다.