# Survey of Cybersecurity Governance, Threats, and Countermeasures for the Power Grid +
## 2 Power Grid Cybersecurity Governance  
Organizations responsible for the generation, transmission, and distribution of electrical energy are subject to a variety of laws, regulations, policies, standards, and guidelines. Ideally, there can be one universal governance framework for the Energy ICS sector. However, the reality is that each organization must determine its own governance structure based on its culture and existing organizational model. Furthermore, there is no single authority within an organization to determine the correct governance framework. However, the NIST Cybersecurity Framework [24] and the DoE C2M2 [8] are both valuable tools for each organization to strategically develop an appropriate cybersecurity governance and management framework. A list of available governance is outlined in Table 1.  
The NIST Cybersecurity Framework Core is comprised of four areas: Functions, Categories, Subcategories, and References. The Functions represent a typical cybersecurity lifecycle with the following stages: Identify, Protect, Detect, Respond, and Recover. Each of \begin{table}
\begin{tabular}{l l l} \hline \hline
**Regulation, Standard, or Guideline** & **Summary** & **Category** \\ \hline U.S. Regulation & Energy Policy Act of 2005 & Statutory \\ \hline U.S. Regulation & Energy Independence and Security Act of 2007 & Statutory \\ \hline NERC CIP Standards & Enforceable set of standards for the Bulk Energy System & Standard \\ \hline \multirow{2}{*}{DHS Nuclear Reactor Cybersecurity} & Cybersecurity Framework Implementation Guidance for U.S. Nuclear Power Reactors & Guidance \\ \hline ES-C2M2 & Electricity Subsector Capability Maturity Model & Guidance \\ \hline DoE & Energy Sector Cybersecurity Framework Implementation Guidance & Guidance \\ \hline NIST CSWP 04162018 & Framework for Improving Critical Infrastructure Cybersecurity & Guidance \\ \hline NIST TN 2051 & Smart Grid Profile of the NIST Framework & Guidance \\ \hline NIST SP 1800-23 & Energy Sector Asset Management & Guidance \\ \hline NIST IR 7628 & Guidelines for Smart Grid Cybersecurity & Guidance \\ \hline NIST SP 1108r3 & NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 3.0 & Standard \\ \hline IEEE C37.1 & Standards for SCADA and Automation Systems & Standard \\ \hline IEEE 1379 & Recommended Practice for Data Communications between RTUs and IEDs & Guidance \\ \hline IEEE 1646 & Standard Communication Delivery Time Performance Requirements & Standard \\  & or Electric Power Substation Automation & \\ \hline IEEE 1686 & Standard for Intelligent Electronic Devices Cyber Security Capabilities & Standard \\ \hline IEEE 692 & Standard for Criteria for Security Systems for Nuclear Power Generating Stations & Standard \\ \hline IEEE 1547.3 & Guide for Monitoring, Information Exchange, and Control of Distributed Resources & Guidance \\ \hline IEEE P1711 & Trial-Use Standard for a Cryptographic Protocol for Cyber Security of Substation Serial Links & Standard \\ \hline IEEE P2030 & IEEE Guide for Smart Grid Interoperability of Energy Technology and Information Technology Operation with the Electric Power System (EPS), End-Use Applications, and Loads & Guidance \\ \hline IEEE P1901 & High Speed Power Line Communications & Standard \\ \hline IEC 61850 & IED Communications (e.g., GOOSE) & Standard \\ \hline IEC 62351 & Security of Communication Protocols & Standard \\ \hline IEC 62541 & OPC Unified Architecture Security Model & Standard \\ \hline ANSI C12 & Metering Protocol & Standard \\ \hline IEEE C37.118 & Synchrophasor Measurements & Standard \\ \hline IEC 60870 & Family of Protocols for SCADA Communications & Standard \\ \hline IEEE 1815 & DNP3 Protocol & Standard \\ \hline Modbus & Modbus Protocol & Standard \\ \hline NRC Regulatory Guide 5.83 & Cybersecurity Event Notifications & Guidance \\ \hline NRC Regulatory Guide 5.71 & Cybersecurity Programs for Nuclear Facilities & Guidance \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Summary of Regulations, Standards, and Guidance for the U.S. Energy Grid.