CONSORTIUM
The consortium includes 14 stakeholders from industrial end users, technological partners and SMEs with diverse and complementary capabilities and thus delivers ample capacity to carry out the presented project.
Information Technology for Market Leadership (ITML) - Project Coordinator
Founded in 2011, ITML is a global ICT enterprise headquartered in Athens, Greece, with offices also in Limassol and Norwich. Specializing in innovative and tailor-made software solutions, ITML leverages a broad range of technologies including big data analytics, advanced data mining, and machine learning/deep learning-based systems. ITML vision is to deliver products and services that meet the real needs of customers and markets, enhancing user experience and expanding access to technology. ITML’s core expertise lies in the design and development of cutting-edge software prototypes utilizing ML algorithms, advanced data mining, IoT data aggregation, and data visualization tools; all of which are applied in different operational domains, such as industrial, transportation, maritime, media, education and cybersecurity.
As the CRACoWi project coordinator, ITML manages crucial aspects like technical management, risk mitigation, and stakeholder collaboration, ensuring the successful implementation of the CRACoWi tool while focusing on system components definition, system evaluation and cybersecurity risk management.
MOTOR OIL HELLAS (MOH)
Motor Oil is a prominent player in the Greek petroleum refining and trading industry. It operates one of Europe’s largest and most modern refineries, located in Agioi Theodoroi, Corinth, Greece. The refinery excels in processing crude oil to yield a comprehensive range of petroleum products and holds a key position in the lubricants market, manufacturing and marketing its in-house brand of lubricants.
Motor Oil refinery has a processing capacity of 185000 BPD, making it a crucial supplier of petroleum products to Greece, Europe, the Middle East and Africa. Motor Oil stands as a significant contributor to Greece’s economic well-being and plays a pivotal role in ensuring the country’s energy security.
Motor Oil is consistently striving to enhance the efficiency and productivity of its refinery by embracing digital technologies that could further optimize operations and contribute to a greener future. Enhanced safety, optimized processes, sustainable practices, advanced automation systems, big data analytics and artificial intelligence technologies are the cornerstones of the digital transformation at Motor Oil that enable the refinery to operate with precision, monitor performance in real-time, and leverage data-driven insights to optimize its operations.
MOH will lead CRACoWi’s Use Case 6, focusing on vendor selection and supply-chain risk management in line with NIS2 regulations. MOH will evaluate the CRA Compliance Wizard for connected devices and provide feedback to improve its functionality, focusing on safety and security devices from various manufacturers and production dates, integrating them into MOH’s production and distribution systems. ITML contributes mechanisms for fast and efficient cybersecurity risk management pertaining to MOH’s safety and security devices.
MOTOR OIL RENEWABLE ENERGY S.A. (MORE)
MORE (Motor Oil Renewable Energy) is a subsidiary company of the Motor Oil Group and is dynamically active in the field of clean energy production.
The company is currently operating ~839MW of Wind/PV/Hydro Assets and it has new upcoming projects which will strengthen the existing RES portfolio with an additional number of 21 wind farms and 7 storage units. Energy management constitutes a key activity and expertise of the company, which is one of the largest Aggregators in Greece. MORE has a portfolio of renewable and storage projects in various stages of development of more than 2.3 GW. The company grows rapidly with responsibility and consistency, implementing, through strategic investments and collaborations, projects of great value. MORE’s vision is, through the innovative development of its units and services, to produce more clean energy, and create more alternatives for a sustainable future for all.
With a vision to play a leading role in the energy transition and in the field of renewable energy sources (RES), the Motor Oil Group, in May 2022, came to an agreement with Ellaktor Group. With this agreement, MORE becomes one of the largest producers of energy from renewable sources, reaching 800MW of capacity in operating projects and a portfolio totalling circa 2.3 GW which is under construction and development.
MORE will collaborate with APRT in Use Case 2c to deploy and evaluate a Vulnerability Management Toolkit across electrical substations. The use case focuses on critical Class I devices, specifically in electrical substations using communication protocols like IEC 61850 and Modbus. It investigates vulnerabilities during the installation or upgrade of these devices. MORE will provide access to its substation for pilot trials and contribute with impact assessment of the vulnerability framework.
ONEKEY (OK)
ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of Pricewaterhouse Coopers Germany (PwC). The unique combination of an automated Product Cybersecurity & Compliance Platform (PCCP) with expert knowledge and consulting services provides fast and comprehensive analysis, support, and management to improve product cybersecurity and compliance from product purchasing, design, development, production to end-of-life.
Critical vulnerabilities and compliance violations in device firmware are automatically identified in binary code by AI-based technology in minutes – without source code, device, or network access. Proactively audit software supply chains with integrated software bill of materials (SBOM) generation. “Digital Cyber Twins” enable automated 24/7 post-release cybersecurity monitoring throughout the product lifecycle.
The patent-pending, integrated Compliance Wizard™ already covers the upcoming EU Cyber Resilience Act (CRA) and existing requirements according to IEC 62443-4-2, ETSI EN 303 645, UNECE R 155 and many others.
7LAYERS A BUREAU VERITAS
Centre for Technological Support, Development and Innovation (KETYAK)
The Centre for Technological Support, Development and Innovation (KETYAK) is an independent structure operating under the oversight of the Hellenic National Intelligence Service (HNIS).
KETYAK’s key areas of expertise and capabilities relevant at CRACoWi are:
• Testing and integration of tools and IT-based solutions, processes and methods for monitoring and handling exploited vulnerabilities in products with digital elements (eg. Platforms of Internet of Things – IoT, governmental Security Operation Centers – g-SOC, Core Service Platforms – CSP).
• Design, recommendation and implementation of policies for effective cybersecurity in support of public and private sector.
• Guidance of Hellenic governmental agencies to comply with the EU Cyber Resilience Act (CRA).
• Enhancement of the capacities of cyber-security personnel with advanced training programmes and operational manuals.
SLOA
SLOA was founded in 2014 by experienced executives in the field of business consulting and software development with many years of experience in similar positions. The areas in which it focuses its services cover the areas of: Business Consulting Planning, Development Policy Design and Implementation and Development and Implementation of Innovative Products.
SLOA has significant know-how and experience in:
- Development of A.I. applications with main activity both in the field of distance sales where the A.I. Sales software leads users – sellers to achieve an optimal number of sales while it has a risk assessment platform for compliance with NIS2.
- Development of compliance-related services and applications in accordance with data security and cybersecurity standards.
- Exploitation of results of research programs and connection of research and production process.
- Technology and Know-How Transfer Services in specialized areas, specializing in the field of energy and software production.
AppArt (APRT)
AppArt, founded in 2012 in Athens, Greece, specializes in developing integrated software solutions for the Telecommunications, Energy, Banking, and Health sectors, serving both private and public organizations. With over 12 years of expertise in Data Analytics, Mobile Applications, Web Development, eHealth, AI/ML, and Next-Gen Messaging, we also engage in R&D through participation in EU and National programs like Horizon 2020 and ESPA.
We emphasize scalability, innovation, and continuous learning, particularly in technologies like 5G, B5G, and 6G. Our experienced team excels in custom application development, ensuring optimal performance and flexibility. Our approach is based on selecting the most suitable technologies for each project, supported by continuous research and training. This has earned us the trust of our clients and partners, enabling us to deliver reliable and innovative solutions tailored to specific needs.
TIKO PRO (TP)
Tiko Pro (TP) is a distinguished project management company and business consultancy. As a certified and award-winning partner, TP boasts a proven track record in acquiring EU funding. Its core business focuses on facilitating innovation across the EU through R&D and deployment financial schemes. Having been actively engaged in numerous EU and nationally funded proposals, providing technical assistance for proposal preparation for over a decade, Tiko Pro’s expertise extends to developing and coordinating communication and dissemination plans.
For EU/nationally funded projects, effectively promoting actions and results to diverse audiences and disseminating outcomes through various media channels is imperative, requiring a strong commitment throughout the entire project life-cycle. A strategic media presence enhances awareness of the project’s initiatives and contributes to the sustainability of its outcomes and deliverables.
While the execution of these activities is a critical component of the project, the experienced and dedicated team at Tiko Pro possesses refined expertise to fully support consortium partners in its effective implementation.
TIKO PRO takes the lead role in »WP 6: Communication, Dissemination and Capacity building« and will chair the Communication and Dissemination Board (CDB).
ERMINAS GMBH (ERMI)
erminas GmbH offers innovative software solutions that are tailored to the specific requirements of its customers. erminas is active in the areas of enterprise applications, Industrial IoT and individual software projects in the B2B sector. Its mission is to improve people’s work through technology. We at erminas love learning new things and are delighted when customers explain their exciting world to us and give us the opportunity to develop customised solutions for them.
In doing so, we attach great importance to quickly presenting secure and proven solutions. With erPUB, erminas offers a flexible solution that processes data decentrally from the machine level to the IT level and can be seamlessly integrated into existing networks to optimise production and industrial processes.
erminas has experience in providing software releases on a weekly basis. In CRACoWi, we want to test this agile way of working with the CRA and are happy to share our findings.
SEVENSHIFT GMBH (SES)
Bunkai is an innovative online platform designed to simplify and automate the security testing of IoT devices. With Bunkai, you can perform comprehensive security tests from anywhere in the world, at any time, eliminating the need to wait for a slot in a specific lab.
Key Features
- Global Accessibility: Bunkai enables users to conduct security tests remotely from any location, at any time.
- All-in-One Testing Suite: The platform offers a complete suite of tests, including network traffic analysis (celular, Wi-Fi, ethernet), firmware inspection, and mobile app package inspection. Bunkai covers all layers of IoT device security, ensuring thorough and reliable testing.
- Global IoT SIM – 5G, 4G, LTE-M, NB-IoT, 3G, 2G
- Compliance and Reporting: Test results are automatically mapped to various compliance standards, such as OWASP, ETSI, CTIA, and IoXT
- User-Friendly Interface: Bunkai’s plug-and-play setup is designed with the end-user in mind. No deep security expertise is required
- Flexible Subscription Model
MEAZON SA (MEAZ)
Meazon is a leading innovator in energy digitization, awarded for its successful collaboration by the EU Seal of Excellence, as well as by the U.S. Department of Energy.
Specializing in advanced energy monitoring and management solutions, they leverage AI algorithms, cloud-based software, and connected hardware to enhance energy efficiency, optimize consumption, reduce carbon footprints, and promote sustainability. Meazon’ s technologies empower organizations to confidently navigate the evolving energy landscape, positioning them as a trusted partner in the pursuit of a greener, more efficient future.
In the context of CRACoWi, Meazon will contribute to the compliance Wizard evaluation and lead the conformity assessment for critical products, while closely following related use cases, i.e. custom B2B software solutions (uc1), cloud software (uc2a), IEC 61850 integrations to SCADA systems (uc2c), and critical infrastructure provider issues (uc6).
Digital Innovation Hub Slovenia (DIHS)
Digital Innovation Hub Slovenia (DIH Slovenia) offers comprehensive support to businesses in their digital transformation journey through several key areas of expertise. First, we focus on digital competences by providing development and research services that help businesses stay up-to-date with the latest digital tools and trends. We also specialize in digital transformation, working closely with small and medium-sized enterprises (SMEs) to develop customized services that facilitate their transition into the digital economy.
Furthermore, we emphasize sustainability through digitalization, guiding businesses in leveraging digital technologies to achieve both economic growth and environmental sustainability. Our commitment to fostering innovation extends to international collaboration, where we engage in knowledge sharing and collaborate with other Digital Innovation Hubs across the EU to promote best practices and innovative solutions.
In addition to these areas, DIH Slovenia offers a range of support services, including access to financing, training, consulting, and management assistance to help businesses successfully navigate their digital transformation. We also play a crucial role in dissemination and promotion, actively raising awareness and communicating the benefits of digital innovation to a broader audience. Through these efforts, DIH Slovenia is dedicated to enhancing digital competencies, fostering innovation, and promoting sustainable development within the Slovenian business community.
URSIV
The Government Information Security Office of the Republic of Slovenia (GISO) is the competent national authority in the field of information security, which acts as a government office. Its core mission is to increase resilience to cyber threats that can threaten individuals, businesses, government, and society at large.
GISO connects stakeholders in the national information security system and coordinates the operational capabilities of the system at a strategic level. It pays particular attention to subjects under the Information Security Act (ZInfV) from a group of essential service providers, from a group of digital service providers and from a group of state administration authorities.
GISO is also the single point of contact to ensure cross-border cooperation with the relevant authorities of other EU Member States and with the European CSIRT Network and other international cooperation tasks. Through its own inspection service, it oversees the implementation of ZInfV.
GISO participates in the CRACoWi project as an associated partner.