KEY ACTION ITEMS DISCUSSED IN THE REPORT
* Sorting out what kind of technologies are best suited to, or needed for, securing the grid.
* Explaining how IT and control systems experts differ, and why that distinction matters for utilities.
* Highlighting the gaps and vulnerabilities that many utilities likely do not realize they have.
* Providing insight into information sharing and regulatory issues concerning US Congressional legislation and NERC critical infrastructure protection (CIP) standards.
* Giving examples of utilities that are doing the right thing, and how other utilities can match them.
THE REPORT EXPLAINS
* How best to keep up with the fast-changing tools and strategies needed to maintain a dedication to the secure, safe and reliable delivery of the energy that fuels modern society.
* How to make good personnel choices to address cybersecurity issues.
* How to avoid mistakes that many have made that likely have caused serious vulnerabilities.
* How to prepare for upcoming NERC CIP reliability standard iterations.
* How NERC plans to bring about improved vertical information sharing.
GIB SOREBO is a recognized expert in assisting government and private sector organizations in their efforts to address cybersecurity risks and to comply with legal and regulatory requirements. He is a chief cybersecurity technologist and vice president for SAIC where he is responsible for coordinating cybersecurity activities in the energy sector company wide and contributes to a variety of smart grid security research efforts. Sorebo co-leads SAIC's Smart Grid Security practice. He established the SAIC Smart Grid Security Solutions Center for product security testing and solution development. Sorebo leads highly experienced technical teams in performing security assessments for commercial and government customers. Most recently, he co-authored Smart Grid Security: An End to End View of Security in the New Electrical Grid, which explores the important techniques, challenges and forces that will shape how we achieve a secure 21st-century electric grid. Sorebo is a frequent speaker at national security and utility conferences such as the RSA Security Conference, Distributech, CSI Annual Conference, Metering America, Autovation and the FIRST Annual Conference where he has given talks on a variety of security topics, including information security liability, Sarbanes-Oxley, e-discovery, smart grid security, NERC CIP, incident response and security breach notification.
SEÁN PAUL MCGURK has over 33 years of experience in advanced systems operation and information systems security. McGurk has managed a number of significant system development and IT security programs in the private sector supporting the Department of Defense and the Intelligence Community. He joined the Department of Homeland Security in January, 2008 where he was the director of the Control Systems Security Program and the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT). After the department established the National Cybersecurity and Communications Integration Center (NCCIC) in 2010, McGurk served as the first Director of this 24X7 integrated cybersecurity and communications operations center providing indications and warning of imminent incidents through cross domain situational awareness, including a continually updated, comprehensive picture of cyber threats, physical communications threats, vulnerabilities and consequences by coordinating national response efforts, developing guidance to mitigate risks and resolve incidents and working directly with federal, state, local, tribal, territorial governments and private sector partners. McGurk holds undergraduate degrees in electronic technology and technical education. He is a member the Information Systems Security Association (ISSA) and the Institute of Electrical and Electronics Engineers (IEEE).
JOSEPH WEISS is an industry expert on control systems and electronic security of control systems with more than 35 years of experience in the energy industry. He spent more than 14 years at the Electric Power Research Institute (EPRI) where he led a variety of programs including the Nuclear Plant Instrumentation and Diagnostics Program, the Fossil Plant Instrumentation & Controls Program, the Y2K Embedded Systems Program and the cyber security for digital control systems. As the technical manager of the Enterprise Infrastructure Security (EIS) Program, he provided technical and outreach leadership for the energy industry's critical infrastructure protection (CIP) program. He was responsible for developing many utility industry security primers and implementation guidelines. He was also the EPRI Exploratory Research lead on instrumentation, controls and communications. Weiss serves as a active member of numerous organizations related to control system security, including the North American Electric Reliability Corporation (NERC) Control Systems Security Working Group (CSSWG), the International Electrotechnical Commission (IEC) Technical Committee (TC) 57 Working Group 15 - Data and Communication Security, the Process Controls Security Requirements Forum and CIGRÉ WG D2.22 - Treatment of Information Security for Electric Power Utilities (EPUs).
ERNIE HAYDEN, CEH, is an experienced information security professional and technology executive providing thought leadership for more than 11 years in the areas of information security, cybercrime/cyberwarfare, business continuity/disaster recovery planning, leadership, management and research. Hayden is the managing principal of energy security at Verizon's Global Energy & Utilities practice based in Seattle. He devotes much of his time to energy, utility, industrial controls and smart grid security on a global basis. Prior to his current position at Verizon, Hayden held roles as an information security officer/manager at the Port of Seattle, Group Health Cooperative, ALSTOM ESCA and Seattle City Light.
DETAILS ABOUT Smart Grid Today's "The Ins & Outs of CYBER inSECURITY" webinar is available at http://www.smartgridtoday.com/
ABOUT SMART GRID TODAY
SMART GRID TODAY'S MISSION is to deliver daily, unbiased, comprehensive and original reporting on emerging trends, applications and policies driving the modern utility industry -- in a signature format that features highly concise and easy-to-understand news copy based on trusted reporting, exclusive interviews, informed analysis and strategic insights that our subscribers rely on to succeed every business day. Smart Grid Today is published 247 times a year by Modern Markets Intelligence, Inc. (MMI), publisher of independent trade news for the evolving energy industry of the 21st century. It is located in Rockville, Md. Sam Spencer founded MMI in 2009 after writing, editing, marketing, publishing, running and inventing trade news publications and related products for three decades.
VP of Editorial
Modern Markets Intelligence, Inc.
VP of Marketing
Modern Markets Intelligence, Inc.