GridEx IV 6500 participants, 206 utilties, 17 cross sector partners. – Gridseccon is in Las Vegas this year. Flamingo Hotel, Oct 16-19. Securing the grid series held at the secret next one will be in June. Non-public GridEx report is on the portal or it can be provided by EISAC. Notable cyber incidents past quarter Zachary Fields, CRISP Analyst, E-ISAC – Mismanaging the AWS buckets on the cloud can make you exposed. Notable physical incidents past quarter Charlotte de Siebert, Principal Physical Security – Analyst, E-ISAC analysis This is all available in weekly reports. – Last two quarters, 46% was associated with theft. 23% surveillance, primarily UAS events, or small craft. Gunfire 31% Damage to structures and lines, generation facilities. – Semi-annual and annual reports for longer term trend analysis. Activists and eco-terrorists Monopods not very sophisticated tree house, either throwing things down or staying up – there for long periods of time in a effort to cause delays. These are hard to get off. Physical security advisory group. - 21 members comprising senior industry SMEs. Possible DBT workshop, topical whitepapers etc. CIP Cloud: FEDRAMP Federal Cloud Model Explained Steven Dougherty, Senior Member, IBM – FEDRAMP Joint Authorization Board is the primary governance and decision making body for – Fedramp. Allows an agency to work with a Cloud Services Provider to implement a solution that meets expectations. Impact Certification – FIPS 199 used for impact level determination, low, med, high. Third Party Assessment Organization (3PAO) - accredited by American Association for Laboratory Accreditation for independent assessment. IBM is certified for moderate impact solutions. Majority are certified at this level. Moderate to high would provide controls similar to CIP.
GridEx IV – 6500 participants, 206 utilties, 17 cross sector partners. Gridseccon is in Las Vegas this year. Flamingo Hotel, Oct 16-19. Securing the grid series held at the secret next one will be in June. Non-public GridEx report is on the portal or it can be provided by EISAC. Notable cyber incidents past quarter – Zachary Fields, CRISP Analyst, E-ISAC Mismanaging the AWS buckets on the cloud can make you exposed. Notable physical incidents past quarter – Charlotte de Siebert, Principal Physical Security Analyst, E-ISAC analysis – This is all available in weekly reports. Last two quarters, 46% was associated with theft. 23% surveillance, primarily UAS events, or small craft. Gunfire – 31% Damage to structures and lines, generation facilities. Semi-annual and annual reports for longer term trend analysis. Activists and eco-terrorists Monopods – not very sophisticated tree house, either throwing things down or staying up there for long periods of time in a effort to cause delays. These are hard to get off. Physical security advisory group. - 21 members comprising senior industry SMEs. Possible DBT workshop, topical whitepapers etc. CIP Cloud: FEDRAMP Federal Cloud Model Explained – Steven Dougherty, Senior Member, IBM FEDRAMP – Joint Authorization Board is the primary governance and decision making body for Fedramp. Allows an agency to work with a Cloud Services Provider to implement a solution that meets expectations. Impact Certification – FIPS 199 used for impact level determination, low, med, high. Third Party Assessment Organization (3PAO) - accredited by American Association for Laboratory Accreditation for independent assessment. IBM is certified for moderate impact solutions. Majority are certified at this level. Moderate to high would provide controls similar to CIP.
CIPC%20June%202018%20Notes.docx