oSIST prEN 17483-4:2025

Private security services - Protection of critical infrastructure - Part 4: Energy sector security services

This document includes the sector specific requirements for the provision of private security services in the energy sector that are additional to the requirements of EN 17483 1.
It specifies service requirements for quality in organization, processes, personnel and management of a security service provider and/or its independent branches and establishments under commercial law and trade as a provider with regard to security services in the energy sector.
It lays down quality criteria for the delivery of security services in the energy sector requested by public and private clients. This document is suitable for the selection, attribution, awarding and reviewing of the most suitable provider of security services in the energy sector.
NOTE 1   This document is the Part 4 of a series of standards on the provision of private security services for critical infrastructure. See Figure 2.
[Figure 2]
NOTE 2   It is important that the selection of a private security service provider always represents the best balance between quality and price. This document sets out the minimum requirements that providers are expected to comply with in order for this balance to be struck.
It specifies service requirements for quality in organization, processes, personnel and management of a security service provider and/or its independent branches and establishments under commercial law and trade as a provider with regard to security services in the energy sector. It lays down quality criteria for the delivery of security services in the energy sector requested by public and private clients.
This document is suitable for the selection, attribution, awarding and reviewing of the most suitable provider of security services in the energy sector.
This document is not applicable to private security services in nuclear power plants.
List of possible activities
Activities for PSCs in CIP in the energy sector:
1.   Perimeter Protection and Surveillance:
—   Human – reception services, static guarding, patrols, possibly K9;
—   Technology – CCTV, Drones, others;
—   Operation of a control/monitoring room;
—   Operation of an alarm monitoring centre;
—   Access Control and Management (tourniquets, barriers, authorization and badges).
2.   Human and technology, e.g. use of screening and detection equipment for:
—   Vehicles;
—   Goods;
—   Visitors;
—   Staff;
—   Contractors (means: human and technology, e.g. use of screening and detection equipment);
3.   Site and off-site Protection and Surveillance / static securing & patrolling on-site and within the building;
4.   Emergency response / crisis management;
—   Alarm intervention;
—   First responders (EHS – Emergency Health Services);

Private Sicherheitsdienstleistungen - Schutz kritischer Infrastrukturen - Teil 4: Sicherheitsdienstleistungen im Energiesektor

Dieses Dokument enthält die branchenspezifischen Anforderungen für die Erbringung von privaten Sicherheitsdienstleistungen im Energiesektor, die zusätzlich zu den Anforderungen von EN 17483 1 gelten.
Es legt Dienstleistungsanforderungen an die Qualität in Bezug auf Organisation, Prozesse, Personal und Verwaltung eines Sicherheitsdienstleisters und/oder seiner unabhängigen Zweigstellen und Niederlassungen nach Handelsrecht als Anbieter von Sicherheitsdienstleistungen für den Energiesektor fest.
Es legt Qualitätskriterien für das Erbringen von Sicherheitsdienstleistungen im Energiesektor fest, die von öffentlichen und privaten Auftraggebern nachgefragt werden. Dieses Dokument ist geeignet für die Auswahl, Zuordnung, Auftragsvergabe und Überprüfung des am besten geeigneten Anbieters von Sicherheitsdienst¬leistungen im Energiesektor.
ANMERKUNG 1   Dieses Dokument ist Teil 4 einer Normenreihe über die Erbringung von privaten Sicherheitsdienstleistungen für kritische Infrastrukturen. Siehe Bild 2.
[Bild 2]
ANMERKUNG 2   Es ist wichtig, dass die Auswahl eines privaten Sicherheitsdienstleisters stets das beste Verhältnis zwischen Qualität und Kosten widerspiegelt. Dieses Dokument legt die Mindestanforderungen dar, deren Erfüllung von den Dienstleistern erwartet wird, um dieses Verhältnis zu verwirklichen.
Es legt Dienstleistungsanforderungen an die Qualität in Bezug auf Organisation, Prozesse, Personal und Verwaltung eines Sicherheitsdienstleisters und/oder seiner unabhängigen Zweigstellen und Niederlassungen nach Handelsrecht als Anbieter von Sicherheitsdienstleistungen für den Energiesektor fest. Es legt Qualitätskriterien für das Erbringen von Sicherheitsdienstleistungen im Energiesektor fest, die von öffentlichen und privaten Auftraggebern nachgefragt werden.
Dieses Dokument ist geeignet für die Auswahl, Zuordnung, Auftragsvergabe und Überprüfung des am besten geeigneten Anbieters von Sicherheitsdienstleistungen im Energiesektor.
Dieses Dokument ist nicht anwendbar auf Sicherheitsdienstleistungen in Kernkraftwerken.
Liste möglicher Aktivitäten
Aktivitäten privater Sicherheitsdienstleister zum Schutz kritischer Infrastrukturen im Energiesektor:
1)   Schutz und Überwachung der Umgebung:
   Personell – Empfangsdienste, feste Bewachung an einem Ort, Streifengänge, möglicherweise Hundestaffel (K9);
   Technisch – Videoüberwachungsanlagen, Drohnen, Sonstiges;
   Betrieb einer Leit-/Überwachungszentrale;
   Betrieb einer Notrufzentrale;
   Zugangskontrolle und -verwaltung (Drehkreuze, Sperren, Genehmigungen und Dienstausweise).
2)   Personell und technisch, z. B. Einsatz von Kontroll- und Detektionsausrüstung für
   Fahrzeuge;
   Güter;
   Besucher;
   Personal;
   Auftragnehmer (d. h. personell und technisch, z. B. Einsatz von Kontroll- und Detektionsausrüstung).
3)   Schutz und Überwachung vor Ort und von außerhalb des Standortes bzw. feste Überwachung an einem Ort und Streifengänge vor Ort und innerhalb von Gebäuden;
4)   Notfallmaßnahmen/Krisenmanagement;
   Eingreifen bei Alarm;
   Ersthelfer (Rettungsdienst).

Services de sécurité privée - Protection des infrastructures critiques - Partie 4 : Services de sécurité dans le secteur de l'énergie

Le présent document inclut les exigences sectorielles relatives à la prestation de services de sécurité privée dans le secteur de l'énergie, qui viennent compléter les exigences de l’EN 17483 1.
Il spécifie les exigences de qualité de service relatives à l’organisation, aux processus, au personnel et à la gestion d’un prestataire de services de sécurité et/ou de ses succursales et établissements indépendants en vertu du droit commercial, agissant en tant que prestataire de services de sécurité dans le secteur de l'énergie.
Il spécifie les critères de qualité relatifs à la prestation de services de sécurité dans le secteur de l'énergie demandés par des clients publics et privés. Le présent document est adapté à la sélection, l’attribution, l’adjudication et la revue du prestataire de services de sécurité le plus approprié dans le secteur de l'énergie.
NOTE 1   Le présent document constitue la quatrième partie d’une série de normes sur la prestation de services de sécurité privée pour les infrastructures critiques. Voir la Figure 2.
[Figure 2]
NOTE 2   Il est important que le choix d’un prestataire de services de sécurité privée représente toujours le meilleur équilibre entre la qualité et le prix. Le présent document définit les exigences minimales auxquelles les prestataires sont tenus de se conformer pour que cet équilibre soit atteint.
Il spécifie les exigences de qualité de service relatives à l’organisation, aux processus, au personnel et à la gestion d’un prestataire de services de sécurité et/ou de ses succursales et établissements indépendants en vertu du droit commercial, agissant en tant que prestataire de services de sécurité dans le secteur de l'énergie. Il spécifie les critères de qualité relatifs à la prestation de services de sécurité dans le secteur de l'énergie demandés par des clients publics et privés.
Le présent document est adapté à la sélection, l’attribution, l’adjudication et la revue du prestataire de services de sécurité le plus approprié dans le secteur de l'énergie.
Le présent document ne s'applique pas aux services de sécurité privée dans les centrales nucléaires.
Liste d'activités disponibles
Activités pour les prestataires de services de sécurité privée dans le cadre de la protection des infrastructures critiques (CIP) dans le secteur de l'énergie.
1.   Protection et surveillance du périmètre :
—   humains – services d'accueil, garde statique, patrouilles, éventuellement brigade canine ;
—   technologie – vidéosurveillance, drones, etc. ;
—   exploitation d'une salle de contrôle/surveillance ;
—   exploitation d'un centre de télé-assistance ;
—   contrôle et gestion des accès (tourniquets, barrières, autorisations et badges).
2.   L'homme et la technologie, par exemple l'utilisation d'équipements de filtrage et de détection pour :
—   les véhicules ;
—   les biens ;
—   les visiteurs ;
—   le personnel ;
—   les contractants (moyens : humains et technologiques, par exemple l'utilisation d'équipements de filtrage et de détection).
3.   Protection et surveillance sur site et hors site / sécurisation statique et patrouille sur site et à l'intérieur du bâtiment.
4.   Intervention d'urgence/gestion de crise ;
—   intervention en cas d'alarme ;
—   premiers intervenants (SMU - services médicaux d'urgence).

Storitve zasebnega varovanja - Zaščita kritične infrastrukture - 4. del: Varnostne storitve v energetskem sektorju

General Information

• Status: Not Published
• Public Enquiry End Date: 26-Feb-2025
• ICS: 03.080.20 - Services for companies
• ICS: 13.310 - Protection against crime
• ICS: 27.010 - Energy and heat transfer engineering in general
• Technical Committee: I11 - Imaginarni 11
• Current Stage: 4020 - Public enquire (PE) (Adopted Project)
• Start Date: 11-Dec-2024
• Due Date: 30-Apr-2025
• Ref Project: prEN 17483-4 - Private security services - Protection of critical infrastructure - Part 4: Energy sector security services

Standards Content (Sample)

SLOVENSKI STANDARD
01-februar-2025
Storitve zasebnega varovanja - Zaščita kritične infrastrukture - 4. del: Varnostne
storitve v energetskem sektorju
Private security services - Protection of critical infrastructure - Part 4: Energy sector
security services
Private Sicherheitsdienstleistungen - Schutz kritischer Infrastrukturen - Teil 4:
Sicherheitsdienstleistungen im Energiesektor
Services de sécurité privée - Protection des infrastructures critiques - Partie 4 : Services
de sécurité dans le secteur de l'énergie
Ta slovenski standard je istoveten z: prEN 17483-4
ICS:
03.080.20 Storitve za podjetja Services for companies
13.310 Varstvo pred kriminalom Protection against crime
27.010 Prenos energije in toplote na Energy and heat transfer
splošno engineering in general
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

DRAFT
EUROPEAN STANDARD
NORME EUROPÉENNE
EUROPÄISCHE NORM
December 2024
ICS 03.080.20; 13.310; 27.010
English Version
Private security services - Protection of critical
infrastructure - Part 4: Energy sector security services
Services de sécurité privée - Protection des Private Sicherheitsdienstleistungen - Schutz kritischer
infrastructures critiques - Partie 4 : Services de Infrastrukturen - Teil 4: Sicherheitsdienstleistungen im
sécurité dans le secteur de l'énergie Energiesektor
This draft European Standard is submitted to CEN members for enquiry. It has been drawn up by the Technical Committee
CEN/TC 439.
If this draft becomes a European Standard, CEN members are bound to comply with the CEN/CENELEC Internal Regulations
which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.

This draft European Standard was established by CEN in three official versions (English, French, German). A version in any other
language made by translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC
Management Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway,
Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Türkiye and
United Kingdom.
Recipients of this draft are invited to submit, with their comments, notification of any relevant patent rights of which they are
aware and to provide supporting documentation.

Warning : This document is not a European Standard. It is distributed for review and comments. It is subject to change without
notice and shall not be referred to as a European Standard.

EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2024 CEN All rights of exploitation in any form and by any means reserved Ref. No. prEN 17483-4:2024 E
worldwide for CEN national Members.

Contents Page
European foreword . 3
Introduction . 4
1 Scope . 5
2 Normative references . 6
3 Terms and definitions . 6
4 General . 7
5 Staff . 7
5.1 Training . 7
6 Quality control and compliance . 12
Annex A (informative) Sectors, subsectors and categories of entities for the energy sector . 14
European foreword
This document (prEN 17483-4:2024) has been prepared by Technical Committee CEN/TC 439 “Private
security services”, the secretariat of which is held by ASI.
This document is currently submitted to the CEN Enquiry.
This document is part of a series of standards:
— EN 17483-1, Private security services – Protection of Critical Infrastructure – Part 1: General
requirements
— EN 17483-2, Private security services – Protection of Critical Infrastructure – Part 2: Airport and
aviation security services
— EN 17483-3, Private security services – Protection of Critical Infrastructure – Part 3: Maritime and port
security services
Introduction
The objective of this document is to set minimum criteria for the provision of energy sector security
services as part of both national and international critical infrastructure.
This document is built on EN 17483-1, which covers the basic and common requirements for all sectors
of critical infrastructure, which meets the need to aim for high quality and harmonized quality criteria
for private security services providers. This, in turn, contributes to good functioning of society. In
outlining what makes a private security company a worthy provider of such crucial critical infrastructure
as the energy sector, the standard aims to contribute to the professionalisation of clients and providers
of private security services.
The series of standards, building on EN 17483-1, which establishes the basic requirements, and all
further upcoming sector specific standards EN 17483-X (including this document) follows a transparent
structure as shown below (see Figure 1).

Figure 1 — Structure for sector-specific standards
The final goal is to create the necessary sector specific standards for every suitable and applicable sector
within critical infrastructure according to the outlined sectors as of EN 17483-1:2021, Annex A.
These sector-specific standards are necessary to compensate for the lack of, or gaps in, legislation. They
are meant to help certifiers check the compliance with the provisions of the main requirements standards
and the sector-specific ones.
This document incorporates the broad interdisciplinary expertise of various organisations and
individuals involved in standardization and private security services at both national and international
level.
Concerning the used terms and definitions in this document see Proposal for a Directive of the European
Parliament and of the Council on the resilience of critical entities. (https://eur-lex.europa.eu/legal-
content/EN/TXT/?uri=COM%3A2020%3A829%3AFIN)
1 Scope
This document includes the sector specific requirements for the provision of private security services in
the energy sector that are additional to the requirements of EN 17483-1.
It specifies service requirements for quality in organization, processes, personnel and management of a
security service provider and/or its independent branches and establishments under commercial law
and trade as a provider with regard to security services in the energy sector.
It lays down quality criteria for the delivery of security services in the energy sector requested by public
and private clients. This document is suitable for the selection, attribution, awarding and reviewing of
the most suitable provider of security services in the energy sector.
NOTE 1 This document is the Part 4 of a series of standards on the provision of private security services for
critical infrastructure. See Figure 2.

Figure 2 — Structure for sector-specific standards
NOTE 2 It is important that the selection of a private security service provider always represents the best balance
between quality and price. This document sets out the minimum requirements that providers are expected to
comply with in order for this balance to be struck.
It specifies service requirements for quality in organization, processes, personnel and management of a
security service provider and/or its independent branches and establishments under commercial law
and trade as a provider with regard to security services in the energy sector. It lays down quality criteria
for the delivery of security services in the energy sector requested by public and private clients.
This document is suitable for the selection, attribution, awarding and reviewing of the most suitable
provider of security services in the energy sector.
This document is not applicable to private security services in nuclear power plants.
List of possible activities
Activities for PSCs in CIP in the energy sector:
1. Perimeter Protection and Surveillance:
— Human – reception services, static guarding, patrols, possibly K9;
— Technology – CCTV, Drones, others;
— Operation of a control/monitoring room;
— Operation of an alarm monitoring centre;
— Access Control and Management (tourniquets, barriers, authorization and badges).
2. Human and technology, e.g. use of screening and detection equipment for:
— Vehicles;
— Goods;
— Visitors;
— Staff;
— Contractors (means: human and technology, e.g. use of screening and detection equipment);
3. Site and off-site Protection and Surveillance / static securing & patrolling on-site and within the
building;
4. Emergency response / crisis management;
— Alarm intervention;
— First responders (EHS – Emergency Health Services);
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
EN 15602:2022, Private security services - Terminology
EN 17483-1:2021, Private security services - Protection of critical infrastructure - Part 1: General
requirements
3 Terms and definitions
For the purposes of this document, the terms and definitions given in EN 15602:2022 and the following
apply.
ISO and IEC maintain terminology databases for use in standardization at the following addresses:

— IEC Electropedia: available at http://www.electropedia.org/
— ISO Online browsing platform: available at http://www.iso.org/obp
4 General
The relevant subsectors within the energy sector are referred to within Annex A.
The provider shall demonstrate their ability to support the client's processes in order to ensure
appropriate and proportionate technical, personel and organisational measures to ensure the client's
security and resilience by providing adequate proof, e.g. documentation of comparable projects,
operating procedures, training plans etc.
The client’s processes shall be based on the client's risk assessment, including measures necessary to:
a. prevent incidents from occurring, duly considering disaster risk reduction and climate adaptation
measures;
b. ensure adequate physical protection of their premises and critical infrastructure, duly considering,
for example, fencing, barriers, perimeter monitoring tools and routines, detection equipment and
access controls;
c. respond to, resist and mitigate the consequences of incidents, duly considering the implementation
of risk and crisis management procedures and protocols and alert routines;
d. recover from incidents, duly considering business continuity measures, in order to resume the
provision of the client's essential service;
e. ensure adequate employee security management, duly considering measures such as setting out
categories of personnel who exercise critical functions, establishing access rights to premises, critical
infrastructure and sensitive information, setting up procedures for security screening of personnel
and laying down appropriate training requirements and qualifications including processes to
address possible risks of insider threats.
In order to support the above-mentioned objectives, the following Clauses 5 to 9 describe the specific
requirements and potential service solutions to be considered by the parties.
5 Staff
5.1 Training
5.1.1 References for training
Energy security staff shall be trained in accordance with the following standards:
— EN 15602;
— EN 17483-1.
The detailed content of this training may vary from country to country.
5.1.2 Basic training
Before being able to perform any energy sector security task, every security officer shall have acquired
basic knowledge and understanding of at least the issues listed below.
— security administration;
Further information on resilience measures of critical entities can be found in the Annex of Directive (EU)
2022/2557 of the European Parliament and of the Council of 14 December 2022.
— relevant international conventions, codes and recommendations (e.g. human rights);
— relevant legislation and regulations;
— responsibilities and
...