Cyber Wiki

Welcome to the Cyber Security for Electric Power Generation CyberWiki

Welcome to the main page of the Electric Power Research Institute's CyberWiki, a wiki-style hub for cyber security research at EPRI, with a focus on operational technology in power generation. CyberWiki was built using the MediaWiki engine to be an extensible and dynamic educational and knowledge dissemination tool. It supplements the published content that is accessible through the EPRI website, or through each program's cockpit, by providing a flexible, web-based content delivery solution for projects that can benefit from the ability to easily update and add content as a project progresses. EPRI members can log in to access additional content through the EPRI Cyber Security for Generation Assets homepage.

The program addresses strategic focus areas including:

• Protection Technologies, Tools, and Guides
• Detection Technologies, Tools, and Guides
• Response and Recovery Technologies, Tools, and Guides
• Process and Integration, Regulatory Impacts, Workforce Development, Training, and GRC
• Emerging Technology Industry-specific technology use cases, guidance, Testing, and Development.
• Changing Threat Landscape
• Industry Collaboration and Benchmarking

Overview

EPRI’s Cyber Security for Generation Assets Program (P209) performed research and development to improve the security, safety, and resiliency of power generation facilities. Cyber attackers target the critical infrastructure that the public relies on for society to function. Proactive defenses are needed to ensure a reliable and resilient power supply for national security across the globe. Without secure energy, public health and welfare are threatened, and economies cannot function. Energy is uniquely vital because it enables all other critical infrastructure sectors, such as healthcare, transportation, food and agriculture, and others.

It is also crucial for power generation companies" business models and regulatory compliance. Advances in control, digital communication, and computational technology fundamentally changes the security postures and regulation. The objective of the Cyber Security for Generation Assets program (P209) is to provide practical applied tools and long-term technology research for operational technology (OT) systems and integrated information technology (IT) use cases (IT/OT). This 2050 vision informs long-term R&D needs for continued energy security.

Protect▼

Technology, methods, and best practices to protect generation OT networks and digital equipment against cyber-attacks.

Detect▼

Techology, methods, and best practices to detect cyber-attacks in generation OT networks.

Respond and Recover▼

Technology, methods, and best practices for responding to and recovering from cyber-attacks in next-generation OT networks.

Changing Threat Landscape▼

Evolving threats, vulnerabilities, and trends.

Emerging Technologies▼

Research and prepare for emerging technologies and power generation trends.

Processes, Integration, and Standards▼

Technical approaches to address process and coordination challenges associated with cyber security. staying apprised of evolving standards, regulations, and guidance

Industry Initiatives and Collaboration▼

Working with power generation companies, technologies providers, academia, and governments across the cyber security spectrum to facilitate an open exchange of innovation and a technical forum for collaboration.

Program Engagement

Sharing and Technology Transfer Monthly Member Webcasts: Open to all EPRI members. Peer-to-peer exchange, industry insights, and emerging trends. Contact Jeremy Lawrence for an invite. Workshops & Advisory Meetings: 3 Meetings per year focused on peer exchange and communicating results + needs.	Technology Application Security Field Testing (Inverters + XPOSE) Risk Estimation and Quantification (CREST) Advanced Detection Through Hardware (HASE) and Digital Twins (CyPhy)
Impactful Content Cyber Risk Estimation (Technoeconomic) Tool and Risk Profiles: 3002029820 Defensible Architectures (Remote access, Virtualization, Cloud, Conventional): 3002032583 IT/OT Cyber Security Workforce and Organization Benchmarking: 3002032597	Featured Paper/Person SOON TBD

Meet the Team

Contact the Team

Jeremy Lawrence, Principal Technical Leader

Jason Hollern, Technical Executive

Soomin Militello, Technical Leader

Christina Lawson, Engineer/Scientist II

Alli Borland, Data Scientist