Cyber Wiki: Difference between revisions

From CyberWiki
Jump to navigation Jump to search
 
(165 intermediate revisions by 2 users not shown)
Line 1: Line 1:
== Welcome to the EPRI Cyber Security for Generation Assets CyberWiki ==
__NOTOC__
Welcome to the main page of the Electric Power Research Institute's CyberWiki, a wiki-style hub for cyber security research at EPRI, with a focus on operational technology in power generation. CyberWiki was built using the MediaWiki engine to be an extensible and dynamic educational and knowledge dissemination tool. It supplements the published content that is accessible through the EPRI website, or through each program's cockpit, by providing a flexible, web-based content delivery solution for projects that can benefit from the ability to easily update and add content as a project progresses. EPRI members can log in to access additional content through the EPRI Cyber Security for Generation Assets homepage.
== Welcome to the Cyber Security for Electric Power Generation CyberWiki ==  
 
<div class="image-text-section">
<div class="section-text">
Welcome to the main page of the Electric Power Research Institute's CyberWiki, a wiki-style hub for cyber security research at EPRI, with a focus on operational technology in power generation. CyberWiki was built using the MediaWiki engine to be an extensible and dynamic educational and knowledge dissemination tool. It supplements the published content that is accessible through the EPRI website, or through each program's cockpit, by providing a flexible, web-based content delivery solution for projects that can benefit from the ability to easily update and add content as a project progresses. EPRI members can [https://www.epri.com/research/programs/112046 log in] to access additional content through the EPRI Cyber Security for Generation Assets homepage.
 
</div>
<div class="section-image">
[[File:HomepageBanner.png|frameless|center|2000x300px]]
</div>
</div>


== Overview ==
== Overview ==
ERPI’s Cyber Security for Generation Assets Program (P209) performed research and development to improve the security, safety, and resiliency of power generation facilities. The program addresses strategic focus areas including:
EPRI’s Cyber Security for Generation Assets Program ([https://www.epri.com/research/programs/112046 P209]) performed research and development to improve the security, safety, and resiliency of power generation facilities. Cyber attackers target the critical infrastructure that the public relies on for society to function. Proactive defenses are needed to ensure a reliable and resilient power supply for national security across the globe. Without secure energy, public health and welfare are threatened, and economies cannot function. Energy is uniquely vital because it enables all other critical infrastructure sectors, such as healthcare, transportation, food and agriculture, and others.
*[https://cyberwikitest.epri.com/Protect Protection] Technologies, Tools, and Guides
 
*[https://cyberwikitest.epri.com/Detect Detection] Technologies, Tools, and Guides
It is also crucial for power generation companies" business models and regulatory compliance. Advances in control, digital communication, and computational technology fundamentally changes the security postures and regulation. The objective of the Cyber Security for Generation Assets program (P209) is to provide practical applied tools and long-term technology research for operational technology (OT) systems and integrated information technology (IT) use cases (IT/OT). This 2050 vision informs long-term R&D needs for continued energy security.
*[https://cyberwikitest.epri.com/Respond_Recover Response and Recovery] Technologies, Tools, and Guides
 
*[https://cyberwikitest.epri.com/Emerging_Technology Emerging Technology] Industry-specific technology use cases, guidance, Testing, and Development.
<div class="image-text-section image-left">
*[https://cyberwikitest.epri.com/Changing_Threats Changing Threat Landscape] Impacts to Power System Security
<div class="section-text">
*[https://cyberwikitest.epri.com/Process Process and Integration], Regulatory Impacts, Workforce Development, Training, and GRC
 
*Industry Collaboration and Benchmarking
<div class="wiki-section">
<div class="mw-customtoggle-protect wiki-section-header">Leading Industry Topics<span class="wiki-section-arrow">▼</span></div>
<div id="mw-customcollapsible-protect" class="mw-collapsible mw-collapsed wiki-section-content">
 
* [[Supply_Chain | Supply Chain]]
* [[Threat_Monitoring | Threat Detection & Monitoring]]
* [[Invertor_Security | Invertor Security]]
* [[OT_Asset_Visability | OT Asset Visibility]]
</div>
</div>
 
<div class="wiki-section">
<div class="mw-customtoggle-detect wiki-section-header">Cyber Body of Knowledge<span class="wiki-section-arrow">▼</span></div>
<div id="mw-customcollapsible-detect" class="mw-collapsible mw-collapsed wiki-section-content">
 
* [[Process | Process and Integration]]
* [[Protect | Protection]]
* [[Detect | Detection]]
* [[Respond_Recover | Response and Recovery]]
* [[Emerging_Technology | Emerging Technologies]]
</div>
</div>
 
<div class="wiki-section">
<div class="mw-customtoggle-RR wiki-section-header">Community Engagement<span class="wiki-section-arrow">▼</span></div>
<div id="mw-customcollapsible-RR" class="mw-collapsible mw-collapsed wiki-section-content">
* [[Research_Impact | P209 Research Impact & Outreach]]
* [[Partners | Research Partners]]
* [[Student_Highlight | Student & Project Highlights]]
* [[Involvement | Get Involved Now]]
</div>
</div>
 
<div class="wiki-section">
<div class="mw-customtoggle-threat wiki-section-header">EPRI Resources<span class="wiki-section-arrow">▼</span></div>
<div id="mw-customcollapsible-threat" class="mw-collapsible mw-collapsed wiki-section-content">
* [https://www.epri.com/research/programs/112046 Cyber Security for Generation Assets Program Page]
* [[Toolkit | Cyber Security Toolkit]]
* [[Terms | Cyber Glossary of Terms]]
</div>
</div>
 
</div>
<div class="section-image">
[[File:Research Framework P209 No Text.png|center]]
</div>
</div>
 
== Upcoming Events and News ==
 
<div class="wiki-slideshow" interval="4000">
<div class="slide">[https://rstcon.org/2026|<span class="ws-button">RSTCON</span>]</div>
<div class="slide">[[Help|<span class="ws-button">Conference</span>]]</div>
<div class="slide">[[Team|<span class="ws-button">News!</span>]]</div>
</div>
 
== Meet the Team ==
[[File:P209_Team.png|center|1000px]]
 
== Contact the Team ==
[Mailto:JLawrence@epri.com Jeremy Lawrence, Principal Technical Leader]
 
[Mailto:JHollern@epri.com Jason Hollern, Technical Executive]
 
[Mailto:SMilitello@epri.com Soomin Militello, Technical Leader]
 
[Mailto:CLawson@epri.com Christina Lawson, Engineer/Scientist II]
 
[Mailto:ABorland@epri.com Alli Borland, Data Scientist]


The CyberWiki also includes industry [https://cyberwikitest.epri.com/Terms definitions, terms], [https://cyberwikitest.epri.com/Standards standards, and regulations].


== Summary of Key Topics and Resources ==
== Image Gallery ==
Here you will find a summary listing of resource areas and key topics.  Published EPRI resources are listed by topic (separate login and access required).  Resources that address multiple topics are listed multiple times.


{| class="wikitable"
<gallery mode ="slideshow">
! Topic
File:Research_Framework_P209_No_Text.png|Example1
! Description
File:Research_Framework_P209_No_Text.png|Example2
! Resources
File:Research_Framework_P209_No_Text.png|Example3
|-
</gallery>
| Changing Threat Landscape
| Cyber security threats evolve and impacts strategy, OT technology, and defensive tools.
| [https://www.epri.com/research/programs/112046/results/3002014312 Quick Brief: Recent Russian Cyber Campaign Targeting the Electric Sector] <br> [https://www.epri.com/research/programs/112046/results/3002015259 Changing Threat Landscape Study Report: Generation Cyber Security] <br> [https://www.epri.com/research/programs/112046/results/3002017849 Quick Brief: Awareness of Nation State Cyber Activity Targeting Critical Infrastructure] <br> [https://www.epri.com/research/programs/112046/results/3002017864 2020 OT Cyber Security Trends for Electric Utilities] <br> [https://www.epri.com/research/programs/112046/results/3002022287 Critical Infrastructure Interdependencies on Generation Capacity] <br> [https://www.epri.com/research/programs/112046/results/3002025919 Operational Technology (OT) Network Segmentation and Micro-Segmentation Strategies]
|-
| Industry Standards and Regulation
| Cyber security focusses on risk reduction. Regulatory standards mandate minimum expectations. Multiple security standards and framework are used worldwide and can align strategies with common terms and expectations. Research guides typically include sections relating to relevant standards and regulations by topic.
| [https://cyberwikitest.epri.com/Standards CyberWiki Standards and Regulation Listing]
|-
| Definitions and Terms
|  
| [https://cyberwikitest.epri.com/Terms CyberWiki Terms Library] <br> [https://csrc.nist.gov/glossary NIST Glossary (External)] <br> [https://nerc.com NERC Published Glossary of Terms (External)] <br> [https://www.isc2.org/certifications/cissp/cissp-student-glossary ISC2 CISSP Student Guide Glossary (External)]
|-
! colspan="3" | Process and Integration
|-
| Governance, Risk, and Compliance
| Governance, Risk, and Compliance (GRC) addresses….
| [https://www.epri.com/research/programs/112046/results/3002012752 Cyber Security Technical Assessment Methodology] <br> [https://www.epri.com/research/programs/112046/results/3002017786 ConEd and Duke Energy Evaluate Cyber Security with Technical Assessment Methodology] <br> [https://www.epri.com/research/programs/112046/results/3002018752 Asset Management and Baseline Configuration for Generation and Renewable Assets] <br> [https://www.epri.com/research/programs/112046/results/3002018753 Risk-Informed Cyber Security Program Guide for Electric Generation Facilities] <br> [https://www.epri.com/research/programs/112046/results/3002019700 Fossil Power Plant Cyber Security Life-Cycle Risk Reduction] <br> [https://www.epri.com/research/programs/112046/results/3002021173 Operations Security (OPSEC) Program Development Guide] <br> [https://www.epri.com/research/programs/112046/results/3002027427 Cyber Security Risk Assessment Methodology] <br> [https://www.epri.com/research/programs/112046/results/3002027428 Cyber Security Case Study in Digital Overspeed Protection Systems] <br> [https://www.epri.com/research/programs/112046/results/3002027921 Cyber Security Operations Security (OPSEC) Awareness Posters] <br> [https://www.epri.com/research/programs/112046/results/3002027981 Duke Energy Optimizes Cyber Security for Generation Fleet]
|-
| Program Development
|  
| [https://www.epri.com/research/programs/112046/results/3002012752 Cyber Security Technical Assessment Methodology: Risk Informed Exploit Sequence Identification and Mitigation, Revision 1] <br> [https://www.epri.com/research/programs/112046/results/3002016128 Transient Cyber Assets (TCAs) and Removable Media Process Guidance: Generation Cyber Security] <br> [https://www.epri.com/research/programs/112046/results/3002018753 Risk-Informed Cyber Security Program Guide for Electric Generation Facilities: Generation Cyber Security] <br> [https://www.epri.com/research/programs/112046/results/3002019699 Developing a Tamper Indicating Device (TID) Program for Cyber-Physical Security] <br> [https://www.epri.com/research/programs/112046/results/3002023339 Cyber-Security Assessment Lessons Learned in Generation] <br> [https://www.epri.com/research/programs/112046/results/3002027981 Duke Energy Optimizes Cyber Security for Generation Fleet]
|-
| Workforce Development
|
| [https://www.epri.com/research/programs/112046/results/3002011188 Patch Management Guideline CBT] <br> [https://www.epri.com/research/programs/112046/results/3002011545 Secure Interactive Remote Access in Power Generation Facilities v1.0] <br> [https://www.epri.com/research/programs/112046/results/3002011991 Guideline on Digital I&C Configuration Management and Hardening for Generation Facilities Computer Based Technology Transfer Modules] <br> [https://www.epri.com/research/programs/112046/results/3002014270 Incident Response Guidance: Generation Cyber Security] <br> [https://www.epri.com/research/programs/112046/results/3002014785 Access Control and Permission Management: Generation Cyber Security] <br> [https://www.epri.com/research/programs/112046/results/3002014786 Guideline on Cyber Security Scanning for Generation Plant Control Systems] <br> [https://www.epri.com/research/programs/112046/results/3002015262 Transient Cyber Assets and Removable Media Guideline] <br> [https://www.epri.com/research/programs/112046/results/3002016907 Technical Assessment Methodology (TAM) Revision 1] <br> [https://www.epri.com/research/programs/112046/results/3002017753 Developing a Cyber Security Culture in the Operational Technology (OT) Environment] <br> [https://www.epri.com/research/programs/112046/results/3002021173 Operations Security (OPSEC) Program Development Guide] <br> [https://www.epri.com/research/programs/112046/results/3002027495 Generation Cyber Security: Workforce Development] <br> [https://www.epri.com/research/programs/112046/results/3002027921 Cyber Security Operations Security (OPSEC) Awareness Posters]
|-
| Supply Chain
|
| [https://www.epri.com/research/programs/112046/results/3002012753 Cyber Security in the Supply Chain: Cyber Security Procurement Methodology, Revision 2] <br> [https://www.epri.com/research/programs/112046/results/3002015402 Understanding Vendor Cyber Security Certifications] <br> [https://www.epri.com/research/programs/112046/results/3002021184 Hydro Power DCS Upgrade Cyber Security Assessment] <br> [https://www.epri.com/research/programs/112046/results/3002027429 Cyber Security Procurement Topical Guide]
|-
! colspan="3" | Protection
|-
| Security Architectures and Segmentation
|
|
|-
| Vulnerability Management
|
|
|-
| Hardening
|
|
|-
| Secure Remote Access
|
|
|-
| Transient Cyber Assets and Removable Media
|
|
|-
| Identity and Access Management
|
|
|-
! colspan="3" | Detection
|-
| Real-Time Detection
|
|
|-
| Scanning
|
|
|-
| Security Event Monitoring
|
|
|-
! colspan="3" | Response and Recovery
|-
| Incident Response Program
|
|
|-
| Incident Response Playbooks
|
|
|-
| Disaster Recovery Plans
|
|
|-
| Scenarios and Training
|
|
|-
| Backup and Recovery
|
|
|-
| Security Operations and Incident Classification
|
|
|-
! colspan="3" | Technology and Use Cases
|-
| Wireless Technology in Generation
|
|
|-
| IIOT, IOT, and Industry 4.0
|
|
|-
| Digital Worker
|
|
|-
| Artificial Intelligence
|
|
|-
| Quantum Computing
|
|
|-
| Software Bill of Materials
|
|
|-
| Control System Case Studies
|
|
|-
| Technical Assessment Methodology Case Studies
|
|
|}

Latest revision as of 18:58, 8 October 2026

Welcome to the Cyber Security for Electric Power Generation CyberWiki

Welcome to the main page of the Electric Power Research Institute's CyberWiki, a wiki-style hub for cyber security research at EPRI, with a focus on operational technology in power generation. CyberWiki was built using the MediaWiki engine to be an extensible and dynamic educational and knowledge dissemination tool. It supplements the published content that is accessible through the EPRI website, or through each program's cockpit, by providing a flexible, web-based content delivery solution for projects that can benefit from the ability to easily update and add content as a project progresses. EPRI members can log in to access additional content through the EPRI Cyber Security for Generation Assets homepage.

HomepageBanner.png

Overview

EPRI’s Cyber Security for Generation Assets Program (P209) performed research and development to improve the security, safety, and resiliency of power generation facilities. Cyber attackers target the critical infrastructure that the public relies on for society to function. Proactive defenses are needed to ensure a reliable and resilient power supply for national security across the globe. Without secure energy, public health and welfare are threatened, and economies cannot function. Energy is uniquely vital because it enables all other critical infrastructure sectors, such as healthcare, transportation, food and agriculture, and others.

It is also crucial for power generation companies" business models and regulatory compliance. Advances in control, digital communication, and computational technology fundamentally changes the security postures and regulation. The objective of the Cyber Security for Generation Assets program (P209) is to provide practical applied tools and long-term technology research for operational technology (OT) systems and integrated information technology (IT) use cases (IT/OT). This 2050 vision informs long-term R&D needs for continued energy security.

Leading Industry Topics▼
Cyber Body of Knowledge▼
Community Engagement▼
EPRI Resources▼
Research Framework P209 No Text.png


Upcoming Events and News

RSTCON
Conference
News!

Meet the Team

P209 Team.png

Contact the Team

Jeremy Lawrence, Principal Technical Leader

Jason Hollern, Technical Executive

Soomin Militello, Technical Leader

Christina Lawson, Engineer/Scientist II

Alli Borland, Data Scientist


Image Gallery

  • Example1

    Example1

  • Example2

    Example2

  • Example3

    Example3

Retrieved from "https://cyberwiki.epri.com/index.php?title=Cyber_Wiki&oldid=536"