Cyber Wiki

Welcome to the Cyber Security for Electric Power Generation CyberWiki

Welcome to the main page of the Electric Power Research Institute's CyberWiki, a wiki-style hub for cyber security research at EPRI, with a focus on operational technology in power generation. CyberWiki was built using the MediaWiki engine to be an extensible and dynamic educational and knowledge dissemination tool. It supplements the published content that is accessible through the EPRI website, or through each program's cockpit, by providing a flexible, web-based content delivery solution for projects that can benefit from the ability to easily update and add content as a project progresses. EPRI members can log in to access additional content through the EPRI Cyber Security for Generation Assets homepage.

The program addresses strategic focus areas including:

• Protection Technologies, Tools, and Guides
• Detection Technologies, Tools, and Guides
• Response and Recovery Technologies, Tools, and Guides
• Process and Integration, Regulatory Impacts, Workforce Development, Training, and GRC
• Emerging Technology Industry-specific technology use cases, guidance, Testing, and Development.
• Changing Threat Landscape
• Industry Collaboration and Benchmarking

Overview

EPRI’s Cyber Security for Generation Assets Program (P209) performed research and development to improve the security, safety, and resiliency of power generation facilities. Cyber attackers target the critical infrastructure that the public relies on for society to function. Proactive defenses are needed to ensure a reliable and resilient power supply for national security across the globe. Without secure energy, public health and welfare are threatened, and economies cannot function. Energy is uniquely vital because it enables all other critical infrastructure sectors, such as healthcare, transportation, food and agriculture, and others.

It is also crucial for power generation companies" business models and regulatory compliance. Advances in control, digital communication, and computational technology fundamentally changes the security postures and regulation. The objective of the Cyber Security for Generation Assets program (P209) is to provide practical applied tools and long-term technology research for operational technology (OT) systems and integrated information technology (IT) use cases (IT/OT). This 2050 vision informs long-term R&D needs for continued energy security.

Protect ▼

Technology, methods, and best practices to protect generation OT networks and digital equipment against cyber-attacks.

Program Engagement

Sharing and Technology Transfer Monthly Member Webcasts: Open to all EPRI members. Peer-to-peer exchange, industry insights, and emerging trends. Contact Jeremy Lawrence for an invite. Workshops & Advisory Meetings: 3 Meetings per year focused on peer exchange and communicating results + needs.	Technology Application Security Field Testing (Inverters + XPOSE) Risk Estimation and Quantification (CREST) Advanced Detection Through Hardware (HASE) and Digital Twins (CyPhy)
Impactful Content Cyber Risk Estimation (Technoeconomic) Tool and Risk Profiles: 3002029820 Defensible Architectures (Remote access, Virtualization, Cloud, Conventional): 3002032583 IT/OT Cyber Security Workforce and Organization Benchmarking: 3002032597	Featured Paper/Person SOON TBD

Contact the Team

Jeremy Lawrence, Technical Leader IV - Supervisor

Soomin Militello, Technical Leader III

Jason Hollern, Technical Executive

Christina Lawson, Staff IV

Alli Borland, Staff I