The AMI System Security Requirements topics that are not applicable to alarms and events consist of the following: Confidentiality and Privacy (FCP) Availability (FAV) Identification (FID) Authorization (FAZ) Non-Repudiation (FNR) Boundary Services (FBS) Resource Management Services (FRS) Trust and Certificate Services (FTS) Development Rigor (ADR) Organizational Rigor (AOR) Handling/Operating Rigor (AHR) Accountability (AAY) Access Control (AAC) In cases where an alarm, or event traces to multiple items in AMI System Security Requirements, the following convention is used: ABC.1,2,..,N where ABC denotes the AMI System Security Requirements category code and 1-N denotes the specific requirement in the category. In cases where multiple categories are referenced, a semicolon (;) is used to separate the category (e.g., ABC.1,2; DEF.1.3). The NISTIR 7628 categories that are applicable to alarm and event consist of the following: Access Control (SG.AC) Audit and Accountability (SG.AU) Identification and Authentication (SG.IA) Communication Protection (SG.SC) Information Integrity (SG.SI) In cases where an alarm, or event traces to multiple items in NISTIR 7628, the following convention is used: AB.CD-1,2,..,N where AB.CD denotes the category code and 1-N denotes the specific requirement in the category. In cases where multiple categories are referenced, a semicolon (;) is used to separate the category (e.g., AB.CD-1,2; EF.GH-1.3). This section also includes material related to the Security Profile for AMI. If applicable, these relationships are indicated along with the section of that document referenced. Authentication This section describes alarms, and events related to authentication.
The AMI System Security Requirements topics that are not applicable to alarms and events consist of the following: Confidentiality and Privacy (FCP) Availability (FAV) Identification (FID) Authorization (FAZ) Non-Repudiation (FNR) Boundary Services (FBS) Resource Management Services (FRS) Trust and Certificate Services (FTS) Development Rigor (ADR) Organizational Rigor (AOR) Handling/Operating Rigor (AHR) Accountability (AAY) Access Control (AAC) In cases where an alarm, or event traces to multiple items in AMI System Security Requirements, the following convention is used: ABC.1,2,..,N where ABC denotes the AMI System Security Requirements category code and 1-N denotes the specific requirement in the category. In cases where multiple categories are referenced, a semicolon (;) is used to separate the category (e.g., ABC.1,2; DEF.1.3). The NISTIR 7628 categories that are applicable to alarm and event consist of the following: Access Control (SG.AC) Audit and Accountability (SG.AU) Identification and Authentication (SG.IA) Communication Protection (SG.SC) Information Integrity (SG.SI) In cases where an alarm, or event traces to multiple items in NISTIR 7628, the following convention is used: AB.CD-1,2,..,N where AB.CD denotes the category code and 1-N denotes the specific requirement in the category. In cases where multiple categories are referenced, a semicolon (;) is used to separate the category (e.g., AB.CD-1,2; EF.GH-1.3). This section also includes material related to the Security Profile for AMI. If applicable, these relationships are indicated along with the section of that document referenced. Authentication This section describes alarms, and events related to authentication.
EPRI_AMI_Incident_Response_20120810.docx