4 Questions that are Top of Mind for Chief Audit Officers in 2021
With the pandemic still a present factor in our personal and professional lives, it has shifted the way we work and the way businesses operate—and most of the changes we’ve made to adapt to the situation are likely here to stay. Having made such a sudden and large change to ... Read More
Reducing Manual Touchpoints to Minimize Risk
One of the single most effective ways to become more resilient as an organization today is to reduce the number of manual touchpoints behind the scenes and replace them with automated processes and workflows. The fact of the matter is, the more manual touchpoints that an organization has, the greater ... Read More
How to Ensure Continuous Compliance with NERC CIP
What is NERC? The North American Electric Reliability Corporation, or NERC, is the largest electric reliability organization in North America. They’re responsible for over 1,900 bulk power system operations spanning the United States and Canada and they administer a Critical Infrastructure Protection (CIP) program in which it is mandatory to ... Read More
Upcoming Discussion: Auditing Fourth-Party Risk and Beyond
August 11, 2021 11am PST/2pm EST Organizations are already painfully aware of the consequences of the pandemic on their operations due to supply chain interruption. Gaps have been identified and new regulations are being announced in response to the myriad of disruptions in the last 18 months. Moving forward, internal ... Read More
Ask the Expert: What are ways we can balance / reduce the workload of the various audit and compliance exercises?
Michael DeLoach, Solution Consultant at Iceberg Networks and Mitch Blackburn, Global Head of Energy & Utilities Industry Solutions at ServiceNow discuss how organizations within the energy industry can balance the workload associated with audit and compliance exercises. The following is an edited transcript of the conversation. Mitch Blackburn: As we talked about in the ... Read More
Ask the Expert: As we see (and expect) regulatory changes and additions, how should companies adjust?
Michael DeLoach, Solution Consultant at Iceberg Networks and Mitch Blackburn, Global Head of Energy & Utilities Industry Solutions at ServiceNow sat down to answer some more of the questions that they are hearing within the energy industry about how organizations should respond to new and changing regulations. The following is an edited transcript of the conversation ... Read More
Ask the Expert: What does ‘Operational Resilience’ mean in the Energy Industry?
Michael DeLoach, Solution Consultant at Iceberg Networks and Mitch Blackburn, Global Head of Energy & Utilities Industry Solutions at ServiceNow sat down with us to answer more questions around what operational resilience means in the energy industry. The following is an edited transcript of the conversation. Michael DeLoach: It’s the ability for organizations to ... Read More
Ask the Expert: Why is it important now that the energy sector focus on securing their OT devices?
Michael DeLoach, Solution Consultant at Iceberg Networks and Mitch Blackburn, Global Head of Energy & Utilities Industry Solutions at ServiceNow discuss why it’s critical that the energy sector focus on securing their operational technology devices today. The following is an edited transcript of the conversation. Mitch Blackburn: We’re seeing that ... Read More
How to Mitigate Risk Against Operational Technology (OT)
Operational technology, or OT, is hardware and software technologies that monitor and control a variety of physical operations including, but not limited to processes, devices, and even various infrastructures like public rail transportation. As OT becomes increasingly digitized, most of these technologies are being connected to corporate networks and the ... Read More
Upcoming Discussion: A Risk-Based Approach to Bridging the Energy Sector Security Gap
Wednesday June 30, 2021 11 AM PST / 2 PM EST NERC has recently partnered with the Department of Energy (DOE) to expand the Cybersecurity Risk Information Sharing Program (CRISP) to include operational technology. The program is aimed at protecting the security of the North American high voltage electric grid. However, ... Read More

