Critical infrastructures of the energy sector play a central role in the appropriate operation of our society and economy. In order to ensure the essential energy security and the economic development, there is a strong demand for the use of advanced energy technologies and their defense against physical and especially cyber-attacks. These forefront technologies have their own typical vulnerabilities as well that have to be unveiled and managed as quick as possible. The preferred scenario is when the resilience of a system can be proofed still during the test operation. In this article, we focus on revealing the cyber vulnerability and resilience associated with engineered energy industrial processes through identifying potential gaps, hazards and risks by design already to protect both the critical infrastructure system and the integrating technologies before the system integration process.