{"id":4528,"date":"2022-12-21T09:39:51","date_gmt":"2022-12-20T22:39:51","guid":{"rendered":"https:\/\/syn01bd.syd6.hostyourservices.net\/~anchoram\/?p=4528"},"modified":"2024-12-09T08:34:04","modified_gmt":"2024-12-08T21:34:04","slug":"integrating-nerc-cip-guidelines-to-the-australian-energy-sector","status":"publish","type":"post","link":"https:\/\/anchoramconsulting.com\/in\/blog\/2022\/12\/21\/integrating-nerc-cip-guidelines-to-the-australian-energy-sector\/","title":{"rendered":"Integrating NERC CIP Guidelines To The Australian Energy Sector"},"content":{"rendered":"

It\u2019s no surprise that industrial environments have become increasingly valuable targets for malicious behaviour, and the Energy Sector is no exception. As energy grids are growing and changing, implementing new technologies and leveraging more commercial off-the-shelf products has the potential to increase the area available to attack. Aspects such as remote management functions and new communication bearers all play into additional risks across both physical and cyber security for asset owners and operators.<\/p>\n

An excellent reference for the Australian Energy Industry is the North American Electric Reliability Corporation (NERC). The relevance of NERC CIP has been discussed in previous articles<\/a>\u00a0and is well worth reading.<\/p>\n

The latest NERC updates aim to integrate cyber and physical security concepts to ensure that across aspects of planning, design and operations, the mitigations to physical and cyber risks are considered. This also aligns well with the more universal Industrial Automation and Control System (IACS) standards such as IEC 62443 where risk management activities are required as part of the system design.<\/p>\n

Those of you familiar with systems engineering aspects would appreciate the focus on the day of operations planning such as CONOPS and detailed requirements analysis and validation. Arguably, NERC\u2019s holistic approach may mirror some of these processes to ensure that the outcome is a secure, resilient and available energy system.<\/p>\n

The release of the NERC strategy focuses on risk management concepts such as identifying, verifying and concentrating on delivering mitigations aiming to improve security integrations.<\/p>\n

There are four core features that are mapped to the NERC Risk Framework, including:<\/p>\n