Your Source for Energy Jobs & Industry News
Cyber security programs assume organizations can recognize control system incidents as being cyber-related. Yet the lack of control system cyber expertise by government organizations including NTSB, FDA, FBI, TSA, EPA, CISA, and DOE have not identified control system incidents as being cyber-related. The five cases discussed were fatal catastrophes. In all cases, NTSB identified control..
Energy Central…
Chuck is a highly respected Cybersecurity expert advising governments and clients around the world. I follow Chuck as only one of a handful of people I consider to be true cybersecurity experts. Read the articles below and you'll see why. We are honored to have Chuck joining us for the PowerSession on SEC Cybersecurity Regulations on December 14. I hope you will join us.
Energy Central…
It appears that Wisconsin Rep. Mike Gallagher, R-Wis has opted to hamstring the cybersecurity experts working to keep the lights on in his district by removing the one tool that can help monitor for vulnerabilities and risks in software used to manage critical infrastructure operations. He has chosen to remove the SBOM provision from the latest NDAA (6722) bill. I hope Mr. Gallagher remembers..
Energy Central…
This article (click Read More below) clearly shows the confusion people have with VEX. This article shows that people are conflating and confusing VEX with "Security Advisories". A Security Advisory tells people which products ARE AFFECTED by a new vulnerability. A VEX tells people which products ARE NOT AFFECTED by a new vulnerability. It's a "negative Security..
Energy Central…
In May 2020, the Edison Electric Institute (EEI) published a model procurement contract for cybersecurity supply chain risk, which is available for download. The foresight shown by EEI in this 2020 artifact is astute and profound on several fronts, as these concepts are now considered mainstream best practices for software supply chains in 2022. The May 2020 release of this contract model..
Energy Central…