Before the hearings started, I felt the number of critical cyber assets for a medium size utility would be on the order of several thousand, not 20 as some major utilities are identifying under the CIP standards. This should be a red flag for the industry.
Grid reliability depends on ‘reasonable business judgment’
The word “security” no longer means what it used to mean. Now, “security” means gates, guards and guns. It means protecting critical assets with a multi-layered cyber and physical perimeter. It means exercising vigilance and caution, and accepting inconvenience as a matter of routine.
Tech experts weigh the options for improving power delivery.
We’ve heard it all before, but the issue isn’t going away: Reliability of power, from generation to distribution, remains a primary concern of the utility industry. But the current verdict is mixed, depending upon which experts you talk to. Aging equipment is a ticking time bomb—except when it isn’t. NERC CIP standards are driving reliability improvements—except when they aren’t. Maintenance is key—except where monitoring and automation are more important. And regulators should stand aside and let the market drive reliability improvements—but economic incentives wouldn’t hurt.
NERC’s first critical-infrastructure standard is now enforceable. But cyber rules await approval.
Cyber standards proposed by the North American Electric Reliability Corp. are in limbo this summer, although the Federal Energy Regulatory Commission anticipates taking action on them soon. Once approved, however, how will the two organizations work together to enforce compliance?
How utilities can navigate critical infrastructure protection requirements.
Operations personnel at many energy companies feel the pressure of achieving compliance with the NERC CIP standards. Some worry that they are not aware of the problems and security incidents that have occurred within their critical infrastructures. Some know that they do not have the procedures in place to maintain CIP compliance.
FERC races to impose NERC’s new rules, raising howls of protest in the process.
After pleading with Congress for so many years, and then at last winning the requisite legislative authority to impose mandatory and enforceable standards for electric reliability, to replace its legacy system of voluntary compliance, NERC finds itself at a curious juncture. It wants to slow the transition.
How reliability performance monitoring and standards compliance will be achieved in real time.
The North American electric power grid has suffered several significant outages in recent years. These events and other incidents around the world spotlight the need for enforceable grid-reliability standards, wide-area visibility of the health of the power system, and real-time monitoring of grid-reliability performance to prevent blackouts. Effective reliability management requires real-time tools and technologies that can detect standards violations so that timely corrective or preventive actions can be taken.
How to develop, implement, and operate a security program.
In May 2, 2006, the NERC board of trustees adopted the Critical Infrastructure Protection Cyber Security Standard. This article provides some answers to questions in the form of security program development, implementation, and operation.
How to prepare for mandatory enforcement.
FERC staff’s Preliminary Assessment of NERC’s proposed reliability standards identified a number of potential deficiencies, many of which NERC plans to address. What adjustments must be made by users, owners, and operators of the bulk power system in the new era of mandatory compliance?
As NERC’s CIP standards advance, utilities move ahead, haltingly, with implementation.
Utilities are preparing for the eventual enforcement of new reliability rules from the North American Electric Reliability Council. As the Federal Energy Regulatory Commission continues its review of the proposed standards, we take a closer look at the effect of these rules on cyber-security, and offer a broad overview of all of the proposed reliability standards.