Activity / Security Existing Guideline Deviation Accept or Responsible Party Estimated Mitigation Strategy Control Mitigate Completion Risk Date (IHD) / The following checklist summarizes the various security best practices and controls that an organization should consider implementing. For more details on any of the activities / security controls, please refer to the descriptions in the Guide to Developing a Cyber Security and Risk Mitigation Plan. ID Activity / Security Control Rationale Associated Documentation 163 Ensure the integrity of data shown on Protect the integrity of data sent to the users’ IHDs. user. 164 Ensure the anonymity and privacy of Protect the privacy of users’ electrical data (where appropriate) pertaining to usage data. electricity usage patterns such that they cannot be tied back to the consumer. 165 Ensure that the software running on Ensure that attackers cannot remotely IHDs is free of weaknesses, especially if control the IHDs of users. these weaknesses are remotely exploitable. 166 If the IHD can send data upstream (an Protect the integrity of data received unusual configuration), ensure the from the user. integrity of such communication.
Activity / Security Control Existing Guideline Deviation Accept or Mitigate Risk Responsible Party Estimated Completion Date Mitigation Strategy (IHD) / The following checklist summarizes the various security best practices and controls that an organization should consider implementing. For more details on any of the activities / security controls, please refer to the descriptions in the Guide to Developing a Cyber Security and Risk Mitigation Plan. ID Activity / Security Control Rationale Associated Documentation 163 Ensure the integrity of data shown on users’ IHDs. Protect the integrity of data sent to the user. 164 Ensure the anonymity and privacy of data (where appropriate) pertaining to electricity usage patterns such that they cannot be tied back to the consumer. Protect the privacy of users’ electrical usage data. 165 Ensure that the software running on IHDs is free of weaknesses, especially if these weaknesses are remotely exploitable. Ensure that attackers cannot remotely control the IHDs of users. 166 If the IHD can send data upstream (an unusual configuration), ensure the integrity of such communication. Protect the integrity of data received from the user.
2014-Coop-Cyber-Security-Plan-Template-Update-1-SampleData.docx