MyDoble / Portal Login EN SEARCH PRODUCTS SOLUTIONS SERVICES TRAINING ABOUT EVENTS Blog Videos Downloads Support Contact Us Careers Back To Blog Cyber Threats on the Rise: Invest Now to Boost Power Grid Defenses By Doble Engineering Company in Security & Compliance | December 1, 2021 Share this... Critical infrastructure security is in the national spotlight. In 2020, the power grid and energy sector was the third most targeted sector for cyber-attacks, up from ninth place in 2019, and the threats are growing more sophisticated. The Biden administration recently issued a national security memorandum which sets baseline cybersecurity goals and practices to protect the grid. The order also encourages the deployment of advanced technology for threat visibility, detection, monitoring, and response. Power and utility companies play a starring role in safeguarding the nation’s infrastructure. As organizations double down on compliance and technology, there are several things to consider amidst a rapidly evolving cybersecurity landscape. Confidently and compliantly secure your assets Maintaining compliance with NERC-CIP standards is just the first, yet critical, step in boosting cybersecurity defenses. These mandates were put forth to institute a bare minimum for security. Keeping up with effective Transient Cyber Asset (TCA) (NERC CIP TCA), vulnerability and patch management and assessments, (NERC CIP-007/NERC CIP-010) and enterprise patch management (NIST SP 800-40 Rev. 3) best practices is foundational to ongoing cyber protection. In addition to choosing technology that makes it easier to adhere to these standards with continuous monitoring, quick patch management, and other capabilities, it’s important the tools you’re using also maintain compliance with these standards. Make sure any software you’re using to manage your assets and their security exceeds NERC CIP-007-6 R2.2 for timely patch evaluations to ensure compatibility. Also ensure that the software has undergone an authenticity and integrity verification process according to NERC CIP 010-3 R1.6 so you know the system is from a legitimate source and hasn’t been modified. Invest in transient cyber asset security and patch management Remote field devices can present major security risks. Transient cyber assets (TCAs) such as tablets, asset testing laptops, and protective relays are often disconnected from the main network, making them a prime channel for spreading malware. Given TCAs contact critical assets regularly, they’re a top security threat if not secured properly. Speed is of the essence when it comes to cybersecurity. However, securing your assets shouldn’t hold productivity back. Look for systems that you can tailor to secure the work processes that need defenses the most and streamline procedures from the field to the office. Tapping patch management software that easily shows the patch updates available to TCAs, enables you to quickly select the updates you want, and automatically downloads those installers to TCAs to be installed during remote updates is key for success. Patch management systems should also monitor, send alerts, and report on security risks, keeping you in a constant state of vigilance. Stay prepared and proactive Cyber threats are fast moving and unpredictable. Utilities need to be armed and ready with the right tools and processes. While advanced technology for threat identification and management is currently strongly encouraged by the Biden administration, it could soon become a requirement. About the authors Bryan Gwyn is the Senior Director of Solutions at Doble Engineering. He has over 10 years of executive experience in the transmission and distribution business and a demonstrated history of working in the utilities industry. Sagar Singam is a Cyber Security Engineer III at Doble. He is passionate about secure coding, cyber security and products. He graduated from the A. G. Patil Institute of Technology and earned his master’s in Information Assurance and Cybersecurity from Regis University. Dan Coombs is the DUCe Support Manager at Doble. He has over 13 years of experience in system engineering and holds a bachelor’s degree in Information Technology from Daniel Webster College. More Information: Blogs: A Refresh on Cybersecurity: How Utilities Can Act Now 100 Years of Doble: Securing the Power Grid When It Matters Most Products: Security & Compliance Transient Cyber Asset Program PatchAssure™ LOAD COMMENTS Back To Blog Search SEARCH Categories Select Category General Condition Monitoring Enterprise Asset Management Training & Education Generator Solutions In-Service Testing & Assessment Transformers Laboratory Diagnostics Circuit Breakers Security & Compliance Protection Testing Off-Line Testing & Assessment Cables Service Doble's Centennial Renewables Manta Test Systems Multi-Gas DGA Authors Select Author... Brian Snyder Bryan Sayler Denis Nesbitt Doble Engineering Company Dom Corsi Ed Khan Etienne Dion Falk Werner G. Matthew Kennedy Gowri Rajappan Hugh Zhu James Holler Jason Varnell Jeff Ward Joe Stevenson Luwendran Moodley Michael Narbrook Paul Griffin Rafal Zaleski Rick Aguilar Robert Brusetti Roberto Martinez Ron Hernandez Sagar Singam Scott Gilbertson Scott Short Simon Sutton Stephan Brauer , Ph.D. Steve Skinner Tony McGrail Tags audit careers Circuit Breakers compliance Condition Monitoring cybersecurity DGA EMI Diagnostics energy Factory Audits IEEE NERC NERC CIP On-line Monitoring Partial Discharge Partial Discharge Detection power regulations risk protection Rotating Machines Transformers transmission and distribution Follow Us Subscribe to our Blog Enter your email address By checking this box, you acknowledge our Privacy Policy and Privacy Notices available here. PRODUCTS Condition Monitoring Enterprise Asset Management In-Service Testing & Assessment Oil Standards Off-line Testing & Assessment Protection Testing Security & Compliance SOLUTIONS Transformers Bushings Protective Relays Circuit Breakers Rotating Machines Cables SERVICES Client Services Consulting & Testing Services Laboratory Services Equipment Rentals Doble Resource Library SUPPORT Overview Downloads Trouble & Failure Reporting Form ABOUT Discover Doble Leadership Team News Careers Contact Us Quality Commitment EVENTS Doble Events Training Industry Events Webinars Earning CEUs Doble is an ESCO Technologies Company Doble is an ISO 9001 & ISO/IEC 17025 & 17034 Certified Company. © 2021 Doble Engineering Company. All Rights Reserved. Privacy Policy & Legal Disclosures.