Smart Grid Cybersecurity Committee Webinar: A Comparison of How Key Cybersecurity Standards Affect Smart Grid

Cybersecurity threats and incidents have been widely published and discussed, most notably the Stuxnet attack against Iranian centrifuges, the 2007 Aurora Generator Test demonstration attack, and the Ukrainian power system SCADA attack.

Because cybersecurity protection is critical to providing electricity service to the power industry, cybersecurity guidelines, requirements, and standards have been developed that directly address security requirements for power systems.

In North America, the most widely known are the NERC CIP standards, but these (currently) apply only to the bulk power system and identify security requirements and compliance criteria, while not addressing possible technical solutions.

In this webinar, we will:
• Compare other cybersecurity standards used world-wide to address power system cybersecurity.
• Discuss three standards, ISO/IEC 27002/27019, NIST IR 7628, and IEC 62443-3-3,that provide high level security requirements and recommendations. These standards often identify similar requirements, while still providing additional perspectives. On the other hand, the IEC 62351 series of documents focuses on detailed technology standards for information security, thus providing some of the solutions for the requirements coming from the higher level standards.

SPEAKER PANEL:

Suzanne Lightman, Senior Information Security Adviser, NIST
Frances Cleveland, President, Xanthus Consulting International