Confidentiality Template page and paragraph number of the document containing the confidential information Description of the confidential information Topic the confidential information relates to (e.g. capex, opex, the rate of return) Identify the recognised confidentiality category that the confidential information falls within Provide a brief explanation of why the confidential information falls into the selected category Specify reasons supporting how and why detriment would be caused from disclosing the confidential information Provide any reasons supporting why the identified detriment is not outweighed by the public benefit (especially public benefits such as the effect on the long term interests of consumers) Appendix 4.3.1 Reactive Asset Replacement Program -Sect 2 Paragraph 3 -Sect 2.2 Table Lines 3, 10 and 11 -Sect 2.2.3 Title and Paragraph 1 -Section 2.2.5 Paragraph 1 -Section 2.2.7 Information such as manufacturer and model numbers, and other product or specific system issues. Capex Other Releasing this information may cause commercial damage to suppliers of Energex and may impact Energex’s commercial position. Details of specific issues encountered with supplier’s products can provide commercial advantage to their competitors and may cause damage to their brand / commercial reputation. The detailed information has been included in the business so that Energex can demonstrate appropriate, independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the fair treatment of suppliers
Paragraph 1 -Sect 2.2.8 Title and Paragraph 1 -Sect 2.2.9 Title, Paragraph 1 and 2 -Sect 2.2.10 Paragraph 1 -Sect 2.2.11 Title and Paragraph 1 -Appendix A which the public expects from Energex. Appendix 4.3.5 Instrument Transformer Information such as manufacturer and model numbers, and other product or Capex Other Releasing this information may cause commercial damage to suppliers of Energex and may impact Details of specific issues encountered with supplier’s products can provide commercial advantage to their The detailed information has been included in the business so that Energex can demonstrate appropriate,
Replacement Program -Executive Summary -Appendix 2 specific system issues. Energex’s commercial position. competitors and may cause damage to their brand / commercial reputation. independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the fair treatment of suppliers which the public expects from Energex. Appendix 4.3.7 Air Break Switch Replacement Program -Executive Summary Information such as manufacturer and numbers, and other product or Capex Other Releasing this information may cause commercial damage to suppliers of Energex and may impact Energex’s commercial position. Details of specific issues encountered with supplier’s products can provide commercial advantage to their competitors and may The detailed information has been included in the business cases so that Energex can demonstrate appropriate, independently verifiable
-Sect 1 Paragraph 2 -Sect 3 Paragraph 4 and Table 1 title -Sect 5.2.1 Paragraph 1 -Appendix 1 specific system issues. cause damage to their brand / commercial reputation. analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and actively work against the fair treatment of suppliers which the public expects from Energex. Appendix 4.3.8 Commercial RTU Program: -Sect 3.2.2 -Sect 3.2.2 Details which provide useful reconnaissance information for potential cyber security attackers. Capex Information affecting the security of the network Any information which gives those with malicious or mischievous intent details which reveals either computer system, telecommunications or operational technology Information which gives potential cybersecurity attackers details on the electronic equipment in use, its software, computer communications The detailed information has been included in the business cases so that Energex can demonstrate appropriate, independently verifiable analysis has been
Paragraph 3, 4 and Figure 2 -Sect 3.2.3 Table 2 -Sect 3.2.4 Paragraph 2 and Table 3 -Sect 3.2.5 Paragraph 3 -Sect 3.3 Paragraph 4 -Sect 3.6 Paragraph 2 Information such as Site Id, manufacturers and model numbers, communication protocols and information on various software bugs and other product or specific system issues. equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion. Appendix 4.3.9 Details which provide useful reconnaissance information for Capex Information affecting the security of the network Any information which gives those with malicious or mischievous intent details which reveals either Information which gives potential cybersecurity attackers details on the electronic equipment in The detailed information has been included in the business cases so that Energex can
-Sect 2.4.1 Figure 2 -Sect 2.4.2 Paragraph 1 and 2 -Sect 2.4.2 Figure 3 -Appendix 1 Table 7 -Appendix 2 Table 8 (all), Table 9 (all) -Appendix 3 table 10 Sub Appendix 4.3.9 SCADA Feature Implementation Program -Sect 2.4.1 Figure 2 -Sect 2.4.2 Details describing issues encountered with specific commercial vendor’s equipment Capex Other (protecting the fair treatment of suppliers) Releasing this information may cause commercial damage to suppliers to Energex, and may impact Energex’s competitive position, Details of specific issues encountered with supplier’s products can provide commercial advantage to their competitors and may cause damage to their The detailed information has been included in the business cases so that Energex can demonstrate appropriate, independently verifiable analysis has been applied to the preparation
-Sect 1 Paragraph 6 -Sect 2 Paragraph 1, 2 and 3 -Sect 3.1 (all) -Sect 3.2 Paragraph 2, 6 -Sect 3.3 -Sect 3.4 (all) -Sect 3.5 -Sect 3.5.1 (all) -Sect 3.5.2 (all) -Sect 3.5.3 (all) -Sect 3.5.4 (all) Information such as Sites, initiative details, manufacturers and model numbers, and other product or specific system issues. equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion.
OT Environment – Refurbishment Program -Sect 3 Table 1 Equipment details -Sect 5 Table Equipment details potential cyber security attackers. Information such as manufacturers and model numbers, and other product or specific system issues. computer system, telecommunications or operational technology equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. use, its software, computer communications protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. demonstrate appropriate, independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion. Appendix 4.4.2 Core IP/MPLS Telecommunications Network (Matrix): Details which provide useful reconnaissance information for Capex Information affecting the security of the network Any information which gives those with malicious or mischievous intent details which reveals either Information which gives potential cybersecurity attackers details on the electronic equipment in The detailed information has been included in the business cases so that Energex can
-Sect 3.1.2 Paragraph 4 -Sect 3.1.4 Paragraph 1 -Sect 4.1 Paragraph 1 and 3 -Sect 4.2.2 Bullet point 3 -Appendix 1 -Paragraph 1 and Tables potential cyber security attackers. Information such as Site Id, manufacturers and model numbers, communication protocols and information on various software bugs and other product or specific system issues. computer system, telecommunications or operational technology equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. use, its software, computer communications protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. demonstrate appropriate, independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion. Appendix 4.4.6 RTU Replacement Program: Details which provide useful reconnaissance Capex Information affecting the security of the network Any information which gives those with malicious or mischievous intent Information gives potential cybersecurity attackers details on the The detailed information has been included in the business cases so that
-Sect 3.1 Paragraph 2, Table 1 and Table 2 -Sect 3.4 Paragraph 1 information for potential cyber security attackers. Information such as Site Id, manufacturers and numbers, communication protocols and information on various software bugs and other product or specific system issues. details which reveals either computer system, telecommunications or operational technology equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. electronic equipment in use, its software, computer communications protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. Energex can demonstrate appropriate, independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion.
Appendix 4.4.7 Obsolete SCADA Equipment: -Sect 3.1.1 Paragraph 2 -Sect 3.1.1 1 -Sect 3.1.2 2 -Sect 3.2.1 Table 4 -Sect 3.2.2 Table 5, Table 6 and Table 7 -Sect 3.2.3 Title and Table 8 -Sect 3.2.5 Title -Sect 3.3 Table 9 -Sect 4.1 Table 10 Details which provide useful reconnaissance information for potential cyber security attackers. Information such as Site Id, manufacturers and model numbers, communication protocols and information on various software bugs and other product or Capex Information affecting the security of the network Any information which gives those with malicious or mischievous intent details which reveals either computer system, telecommunications or operational technology equipment types, operating system, software application, software middleware or other relevant to the cybersecurity exploits which may be successful when used against the system should not be made public. Information which gives potential cybersecurity attackers details on the electronic equipment in use, its software, computer communications protocols or the way in which the devices are interconnected is of significant benefit to planning and executing a successful cyber intrusion. The detailed information has been included in the business cases so that Energex can demonstrate appropriate, independently verifiable analysis has been applied to the preparation of the programs/projects proposed. Public release of the specific details however provides no public benefit to consumers, and would actively work against the public interest, increasing the probability of successful cyber intrusion.
KPMG (2015) – Report to the Board of Sparq Solutions on ICT Expenditure Forecasts for the Period: 2015-2020 Pages 47-55 The report contains financial information of cost of outsourced ICT functions. Seeking to redact the financial data only Column titled $AUD Outsourced. Cost of outsourced ICT service Market sensitive cost inputs The disclosure could be misused by ICT service providers. The disclosure will undermine the competitive tension between ICT service providers. It is in the long term interest of the public to pay an economically efficient rate for electricity usage. By allowing ICT service providers access to information on ICT competitors may result in an economically inefficient price being offered to Ergon Energy, and hence passed through to consumers. Proportion of confidential material
Submission title Number of of submission that includes information subject to a claim of confidentiality Number of pages of submission that do not include information subject to a claim of confidentiality Total number of pages of submission Percentage of pages of submission that include information subject to a claim of confidentiality Percentage of of submission that do not include information subject to a claim of confidentiality Revised regulatory proposal 0 159 159 0% 100% Revised regulatory proposal appendices (excluding appendices 7.9 and 7.10 as these are spreadsheets) 104 1306 1410 7.4% 92.6%