New Cyber-Security Standards for N. American Power System
The North American Electric Reliability Corporation's board of trustees has approved changes that make cyber-security compliance for the electric industry more stringent.
First, a disclaimer: I work for CoreTrace, a security software provider that is helping utilities stop malware and unapproved applications (NERC CIPs -007 & -003, respectively).
Having reviewed just those specific CIPs (which only changed slightly this go around), I believe that they still need to be to be changed to reflect their actual purpose, preventing the execution of any unauthorized code, rather than prescribing specific technologies—especially technologies that are completely inconsistent with the operational realities of the energy management systems that make up most of the grid's critical infrastructure.
New Cyber-Security Standards for N. American Power System
The North American Electric Reliability Corporation's board of trustees has approved changes that make cyber-security compliance for the electric industry more stringent.
» View Article
First, a disclaimer: I work for CoreTrace, a security software provider that is helping utilities stop malware and unapproved applications (NERC CIPs -007 & -003, respectively).
Having reviewed just those specific CIPs (which only changed slightly this go around), I believe that they still need to be to be changed to reflect their actual purpose, preventing the execution of any unauthorized code, rather than prescribing specific technologies—especially technologies that are completely inconsistent with the operational realities of the energy management systems that make up most of the grid's critical infrastructure.
Thanks JT,
Interesting feedback. Feel free to contact me at jgoodchild@cxo.com if you want to discuss further.
Dirty Tricks: Social Engineers' Favorite Pickup Lines
Tabletop Exercises: 3 Sample Scenarios
19 Ways to Build Physical Security Into Your Data Center
Get instant notifications when whitepapers, webcasts and case studies are added to our library. Sign up for a Resource Alert now!
CSO Corporate Partners
» More blogs
CSO Perspectives
Santa Clara, California
(ISC)2 members can earn up to 24 CPE Credits!
Trend Micro ranked #1 against real-world malware. Read more.
64-page prescriptive guide to security, compliance, and IT operations.
Removing Barriers To Better Server Virtualization Efficiency
Mining for Gold: Cybercrime Prevention and the Role of Log Management
The Executive Guide to Data Loss Prevention
Organizations can spend up to 50% more on compliance efforts than necessary.
White Paper: A Security Blueprint Delivered From within the Network
Read the RSA report: Security for Business Innovation
Upgrading to VMware vSphere with vWire
Explore the increasing importance of log management as cybercrime threats grow.
The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
Implementing Best Practices for Web 2.0 Security
Five Ways to Reduce Your IT Audit Burden
THE IDG NETWORK