Risk
3/12/2011
08:12 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

NERC Creates Cyber Assessment Task Force

The North American Electric Reliability Corporation (NERC) recently announced the formation of a Cyber Attack Task Force. The task force will be charged with identifying the potential impact of a coordinated cyber attack on the reliability of the bulk power system.

The North American Electric Reliability Corporation (NERC) recently announced the formation of a Cyber Attack Task Force. The task force will be charged with identifying the potential impact of a coordinated cyber attack on the reliability of the bulk power system.According to this release, the task force "will identify opportunities to enhance existing protection, resilience and recovery capabilities associated with power system operations practices, plans and procedures, as well as the tools and systems that operators rely upon to manage the reliable operation of the bulk power system."

The goal is to develop flexible options so that potential attacks can be spotted and rapidly mitigated.

So far, the task force comprises roughly 40 volunteers, and is chaired by Mark Engels, director of Information Technology Risk Management at Dominion. Charles Abell, supervising engineer of Transmission Operations Technical Support at Ameren Corporation, is vice chair.

The creation of the task force is part of the "Coordinated Action Plan" that was developed as part of a cooperative effort between NERC and the Department of Energy. That report concluded that the best way to manage a cyber event would be through a coordinated effort between the bulk energy industry and NERC-led initiatives. The June 2010 report, High Impact, Low Frequency Event to the North American Bulk Power System can be found here.

The resulting coordinated response to an attack that arrives from the Coordinated Action Plan is supposed to model "extreme conditions that would make bulk power system operations much more challenging than would normally be considered by electricity entities through their usual planning and preparedness activities," the initiative's scope document states.

A separate Smart Grid Security Task Force is being established to address security issues related to smart grid.

"NERC and the electricity industry have been actively addressing cybersecurity risks for some years now," said Gerry Cauley, president and CEO of NERC said in a statement. "This initiative will more thoroughly examine the potential impact of a targeted cyber attack and how the industry should best coordinate the preparedness and response actions of cyber security experts with power grid operators."

Let's hope so.

For my security and technology observations throughout the day, find me on Twitter.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7441
Published: 2015-05-29
The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.

CVE-2014-9727
Published: 2015-05-29
AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.

CVE-2015-0200
Published: 2015-05-29
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors.

CVE-2015-0751
Published: 2015-05-29
Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800.

CVE-2015-0752
Published: 2015-05-29
Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.

Dark Reading Radio
Archived Dark Reading Radio
After a serious cybersecurity incident, everyone will be looking to you for answers -- but you’ll never have complete information and you’ll never have enough time. So in those heated moments, when a business is on the brink of collapse, how will you and the rest of the board room executives respond?