Initially, the research covers the concept of the transmission system operator, explaining what components they consist of and what their purpose is. Provides an in-depth introduction to the topic of SCADA systems, an essential part of power transmission systems that support infrastructure management and monitoring. Their understanding and recognition of vulnerabilities are essential for the development of effective security measures to protect critical energy infrastructure. It emphasizes the concept of OSINT, which provides valuable information about potential threats and attackers. The use of OSINT in the analysis of the security of the transport system allows the creation of protection strategies based on real data. The actual data collection of one transmission system operator is also described. The article then examines Docker, a popular tool for building and managing containerized environments. Docker enables rapid deployment and testing of various software solutions, which is crucial for developing security mechanisms in cyberattack environments. The following sections explain the basic settings and usage of the IMUNES network emulator. Using this tool, we developed a honeypot for a transmission system operator. Additionally, research focuses on the concept of honeypots, a technique to attract and contain cyberattacks, to analyze and understand attack techniques. Honeypots are useful tools for detecting and preventing threats and provide valuable information about attackers and their methods. In the last part, I talk about good practices in their construction and describe in detail the procedures I took in configuring such a honeypot.