CyberSecurity is a growing concern especially in open grids, where attack propagation is easy due to existing collaborations. We consider how to respond optimally to an attack in grid environments.

We present an optimization model that takes the existing collaborations as input and minimizes the disruption to the grid whilst reducing threat-levels at unaffected sites. Our optimization model outputs which collaborations must be suspended or monitored to reduce threat-levels at unaffected sites.