CyberOne is completing Stage 2 of the project, focused on threat modelling, scenario development and technical preparation for the next assessment phase.
The project “Water Utilities Penetration Testing – ViK Plovdiv & ViK Varna” is currently approaching Milestone 2, marking completion of the Testing Scenarios Report and the technical baseline for the next implementation phase.
The project is currently in Stage 2, focused on the development of the Testing Scenarios Report ahead of the second milestone submission.
This stage translates the approved execution baseline into structured technical scenarios that will guide the assessment work in the next phase. It includes ATT&CK-aligned threat modelling, mapped risk scenarios, and detailed coverage logic across web applications, network infrastructure and IoT/IIoT or SCADA-adjacent assets.
The current phase is particularly important because it defines how the project’s technical methodology will be applied in practice across the two beneficiary utilities. It consolidates the scenario logic, safeguards and testing structure required for controlled execution in operationally sensitive environments, while preserving the zero-disruption and confidentiality principles .
Funding acknowledgement and disclaimer
Funded by the European Union under the Digital Europe Programme, Grant Agreement No. 101158471.
Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Cybersecurity Competence Centre. Neither the European Union nor the granting authority can be held responsible for them.
