NERC to utilities: Reduce cyber security risk
In a letter to the electric utility industry, Michael Assante, chief security officer for NERC (National Electric Reliability Corporation), is delivering a diplomatic but pointed message: By trying to avoid regulation, utilities are putting the electrical system at risk. In this case, cyber security risks may have increased because of the way some electric utilities are approaching regulatory c...
In a letter to the electric utility industry, Michael Assante, chief security officer for NERC (National Electric Reliability Corporation), is delivering a diplomatic but pointed message: By trying to avoid regulation, utilities are putting the electrical system at risk. In this case, cyber security risks may have increased because of the way some electric utilities are approaching regulatory compliance.
New regulations intended to protect the bulk electric grid are aimed at assets that have been classified as “critical.” The specific definition identifies assets that “if destroyed, degraded, or otherwise rendered unavailable, would affect the reliability or operability of the Bulk Electric System.” In an apparent effort to avoid regulation, utilities are reporting that they have relatively few plants and parts of their distribution networks that qualify under the definition.
NERC’s view is that the utilities are not really considering how interconnected all the parts of the system are and are therefore drastically undercounting those that should fall appropriately under the regulation. Assante’s suggestion is that utilities perform their analysis again beginning with the assumption that all assets are critical unless there are clear reasons that they can be ruled out, rather than the reverse.
As the letter states, “NERC is requesting that entities take a fresh, comprehensive look at their risk-based methodology and their resulting list of CAs [critical assets] with a broader perspective on the potential consequences to the entire interconnected system of not only the loss of assets that they own or control, but also the potential misuse of those assets by intelligent threat actors. Although it is the responsibility of the Registered Entities to identify and safeguard applicable CAs, NERC and the Regional Entities will jointly review the significant number of…entities that reported having no CAs to determine the root cause(s) and suggest appropriate corrective actions, if necessary.”
- Events & Awards
- Magazine Archives
- Oil & Gas Engineering
- Salary Survey
- Digital Reports
- Survey Prize Winners
- CFE Edu
Annual Salary Survey
Before the calendar turned, 2016 already had the makings of a pivotal year for manufacturing, and for the world.
There were the big events for the year, including the United States as Partner Country at Hannover Messe in April and the 2016 International Manufacturing Technology Show in Chicago in September. There's also the matter of the U.S. presidential elections in November, which promise to shape policy in manufacturing for years to come.
But the year started with global economic turmoil, as a slowdown in Chinese manufacturing triggered a worldwide stock hiccup that sent values plummeting. The continued plunge in world oil prices has resulted in a slowdown in exploration and, by extension, the manufacture of exploration equipment.
Read more: 2015 Salary Survey