AF Authenticator <Role> shall obscure the feedback of SG.IA-6 FR23, FS3 Feedback authentication information during the authentication process, for example by masking passwords and providing login failure messages that do not reveal valid user accounts. AVC Alternate Value <Role> shall (1) utilize an independent FR25 Comparison means (alternate data sources and/or computations to derive equivalent values) to validate the integrity of power system information utilized as input for decision making by protection or critical automated control applications, (2) continually compare independently derived results, and (3) have procedures in place to inconsistencies that are deemed to be significant according to organizationally defined criteria. BPR Backup Power Components essential for closed loop control SG.PE-9 FR24, FC3 Requirement functions shall be capable of operating for a minimum of 1 hour upon loss of primary power source. This requirement can be met by the use of a UPS, battery backup, or alternate power source. CAR Content of Audit <Role|device> shall produce audit records for SG.AU-3, FS2 Records each event with information including 1) date SG.AU-15 and time of the event, 2) the identity of the user/<role>/component where the event occurred, type of the event, 4) the identity of the user/<role>/component that detected the event, and 5) known details of the event including location (logical and physical). The system shall have the capability to centrally manage content of audit records generated by individual roles/components. Minimal set of auditable events includes: access (whether central, remote, logical, physical, emergency, authorized, or unauthorized), unsuccessful authentication, change in configuration, and health and resource warnings. The list of auditable events and audit records shall be reviewed periodically. CCf Communication <Role> employs FIPS 140-2 compliant SG.SC-9 FC5 Confidentiality cryptographic mechanisms to prevent unauthorized disclosure or modification of management (including electronic authenticator distribution) and configuration data during transmission. Latency induced from the use of cryptographic mechanisms must not degrade the operational performance of <role>.
AF Authenticator Feedback <Role> shall obscure the feedback of authentication information during the authentication process, for example by masking passwords and providing login failure messages that do not reveal valid user accounts. SG.IA-6 FR23, FS3 AVC Alternate Value Comparison <Role> shall (1) utilize an independent means (alternate data sources and/or computations to derive equivalent values) to validate the integrity of power system information utilized as input for decision making by protection or critical automated control applications, (2) continually compare independently derived results, and (3) have procedures in place to inconsistencies that are deemed to be significant according to organizationally defined criteria. FR25 BPR Backup Power Requirement Components essential for closed loop control functions shall be capable of operating for a minimum of 1 hour upon loss of primary power source. This requirement can be met by the use of a UPS, battery backup, or alternate power source. SG.PE-9 FR24, FC3 CAR Content of Audit Records <Role|device> shall produce audit records for each event with information including 1) date and time of the event, 2) the identity of the user/<role>/component where the event occurred, type of the event, 4) the identity of the user/<role>/component that detected the event, and 5) known details of the event including location (logical and physical). The system shall have the capability to centrally manage content of audit records generated by individual roles/components. Minimal set of auditable events includes: access (whether central, remote, logical, physical, emergency, authorized, or unauthorized), unsuccessful authentication, change in configuration, and health and resource warnings. The list of auditable events and audit records shall be reviewed periodically. SG.AU-3, SG.AU-15 FS2 CCf Communication Confidentiality <Role> employs FIPS 140-2 compliant cryptographic mechanisms to prevent unauthorized disclosure or modification of management (including electronic authenticator distribution) and configuration data during transmission. Latency induced from the use of cryptographic mechanisms must not degrade the operational performance of <role>. SG.SC-9 FC5
SA%20Security%20Profile%20-%20v0_15%20-%2020120930.docx