Cybersecurity for submarine structures

Interview with Silvio Parente
Cyber Resilience Strategy 
and OT Security at Terna

Submarine infrastructures are increasingly at the center of geopolitical, economic, and security interests.

The European submarine network is a vital Critical Infrastructure (CI). This underwater cable and pipeline network is crucial for the functioning of European society.

As threats become more hybrid and sophisticated, protecting these assets requires an approach that addresses both cyber and physical domains.

Key emerging threats include: 

  • Intentional damage or interference by nation-states, using submarines, unmanned underwater vehicles, and covert operations
  • Cyber intrusions on their supporting digital systems e.g. landing stations, network controllers, SCADA platforms etc.
  • Exploitation as insider threats of the personnel involved in the construction, maintenance, or operations; third-party components or services can also be exploited to insert cyber backdoors or compromise integrity
  • The increasing use of AI, IoT, edge computing, which improves efficiency but also expands the attack surface. Automation can introduce systemic vulnerabilities across both cyber and physical layers, requiring a “security by design” approach.  

To address these converging risks, a shift from reactive defense to resilience-by-design and integrated risk governance is essential.

The EU-backed VIGIMARE project takes a systematic approach to strengthening the European network of submarine telecommunication cables, power cables and gas pipelines. It stands out for its integrated, multi-domain focus.

Key innovations include:  

  • A converged physical-cyber risk framework: VIGIMARE goes beyond traditional physical surveillance or isolated cybersecurity tools by merging cyber and physical threat detection into a unified risk management model
  • Real-time monitoring and situational awareness: the project leverages a network of tools to enable continuous monitoring of critical underwater assets. This provides early detection of anomalies, whether physical (e.g., suspicious underwater activity) or cyber (e.g. unusual access patterns in landing stations)
    A European-wide vision: unlike more localized or bilateral projects, VIGIMARE is designed as a scalable and replicable model across EU member states, supporting the EU’s broader maritime security and strategic autonomy goals. It is highly aligned with the strategic objectives and compliance requirements set out by the CER (Critical Entities Resilience) and NIS2 directives. 

In short, it combines advanced technological capabilities, real-time intelligence sharing, and cross-sectoral coordination to address the growing hybrid threats to Europe’s submarine infrastructures.

Terna, Italy’s electricity transmission system operator, participates in the VIGIMARE project as the owner of the critical subsea infrastructure featured in the Mediterranean use case.

We are directly involved in several key activities:  
  • Risk and threat analysis related to the infrastructure, with a particular focus on hybrid scenarios involving both cyber and physical components
  • Development of detection and monitoring capabilities, in collaboration with technology providers, aimed at enhancing situational awareness and early identification of anomalies in the submarine infrastructures domain
  • Contribution to the definition of response and resilience strategies
  • The sharing of operational insights and technical expertise, in compliance with security regulations, to support the development of interoperable protection models.  

VIGIMARE’s emphasis on interconnections and interdependencies among infrastructure networks is crucial to achieving the EU’s dual objective of resilience and open strategic autonomy.

This systems-level approach acknowledges a fundamental reality: modern infrastructures are not isolated assets but deeply integrated nodes in a broader, interdependent ecosystem of digital, energy, military, and logistical domains.

As part of the VIGIMARE project, Terna is leading a strategically important pilot use case focused on its submarine interconnection infrastructures.

Terna’s contribution focuses on multi-vector hybrid attacks that combine cyber and physical tactics targeting HVDC submarine infrastructure.

The models account for operational, safety, environmental, and defense-level consequences, and include the simulation of coordinated threats such as SCADA manipulation, ICS-targeting malware, phishing, ransomware, and more.

These simulations go beyond traditional tabletop exercises, creating field-informed risk scenarios that push the boundaries of conventional critical infrastructure protection.

Terna is also providing Risk and Threat Modeling, Scenario-based Simulations, and Monitoring and Detection Strategies tailored to submarine assets, integrating cyber and physical risk indicators.

From the start, RINA has contributed significantly to promoting innovation and knowledge exchange within the VIGIMARE project.

Its involvement has helped create a collaborative environment where different expertise and perspectives come together, which in turn has supported the development of new approaches to managing cyber-physical risks.

This cooperation has supported steady progress and added value to the project overall. 

Learn more about ​​Terna
BIO.

Silvio Parente is a cybersecurity governance and risk management expert with significant experience in the protection of critical infrastructures. He currently works at Terna, Italy’s electricity transmission system operator, where he leads key initiatives within the Cyber Security Program and Portfolio, supporting the implementation of strategic activities aimed at enhancing the cyber resilience of the national power grid.

His work focuses on risk-based prioritization, performance monitoring frameworks, and the strategic development of cybersecurity initiatives.

Previously, he held positions at Cassa Depositi e Prestiti and Deloitte, where he led ICT governance, risk assessment, and compliance projects in complex organizational environments.

Silvio holds a Master’s degree with honors in Statistical Sciences and a second-level Master’s in Homeland Security, with a specialization in critical infrastructure protection. He is a Certified Information Systems Auditor (CISA) and has deep expertise in cyber risk analysis, internal control systems, and regulatory frameworks.