Joint “CYPRES” Report on Incident Response Released by FERC

Earlier this month, the Federal Energy Regulatory Commission (FERC) published a joint report entitled “Cyber Planning Response and Recovery Study” (CYPRES) in partnership with the North American Electric Reliability Corporation (NERC) and ...

Software Monitoring for NERC CIP Compliance: Part 2

In Part 1 of this series, I walked through the background of the NERC CIP version 5 controls and outlined what needs to be monitored for NERC CIP software requirements. In this ...

Choosing the Right Industrial Cybersecurity Framework

| | _NERC, AWWA, ICS Security, NIST
It’s no surprise that industrial environments have become increasingly valuable targets to malicious behavior. The State of Security has featured many cybersecurity events in the recent past across a myriad of industrial ...

ICS Cybersecurity: Visibility, Protective Controls, Continuous Monitoring – Wash, Rinse, Repeat

| | _NERC, ICS Security, PLC, SSH
As we have talked about in prior blogs, industrial cybersecurity is a journey. This is a journey that is never-ending, as control system technology advancements are adopting information technology (IT) and cloud-based ...

Revised Critical Infrastructure Protection Reliability Standard CIP–003–7: What Are the Changes?

The U.S. Government is constantly working to improve its ability to respond to the growing threat of cyber-attacks facing the national power grid. Towards that end, the Federal Energy Regulatory Commission (FERC) ...

Secure Guardrails