Cyber Wiki
Welcome to the EPRI Cyber Security for Generation Assets CyberWiki
Welcome to the main page of the Electric Power Research Institute's CyberWiki, a wiki-style hub for cyber security research at EPRI, with a focus on operational technology in power generation. CyberWiki was built using the MediaWiki engine to be an extensible and dynamic educational and knowledge dissemination tool. It supplements the published content that is accessible through the EPRI website, or through each program's cockpit, by providing a flexible, web-based content delivery solution for projects that can benefit from the ability to easily update and add content as a project progresses. EPRI members can log in to access additional content through the EPRI Cyber Security for Generation Assets homepage.
Overview
ERPI’s Cyber Security for Generation Assets Program (P209) performed research and development to improve the security, safety, and resiliency of power generation facilities. The program addresses strategic focus areas including:
- Protection Technologies, Tools, and Guides
- Detection Technologies, Tools, and Guides
- Response and Recovery Technologies, Tools, and Guides
- Emerging Technology Industry-specific technology use cases, guidance, Testing, and Development.
- Changing Threat Landscape Impacts to Power System Security
- Process and Integration, Regulatory Impacts, Workforce Development, Training, and GRC
- Industry Collaboration and Benchmarking
The CyberWiki also includes industry definitions, terms, standards, and regulations.
Summary of Key Topics and Resources
Here you will find a summary listing of resource areas and key topics. Published EPRI resources are listed by topic (separate login and access required). Executive summaries and key facts and considerations are linked.
| Area | Topic | Description | Resources |
|---|---|---|---|
| Changing Threat Landscape | Changing Threat Landscape | Cyber security threats evolve and impacts strategy, OT technology, and defensive tools. | Title of R&D with Link R&D Title EPSN |
| Industry Standards and Regulation | Industry Standards and Regulation | Cyber security focusses on risk reduction. Regulatory standards mandate minimum expectations. Multiple security standards and framework are used worldwide and can align strategies with common terms and expectations. | Title of R&D Link Title of R&D Link |
| Area | Topic | Description | Resources | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Changing Threat Landscape | Changing Threat Landscape | Cyber security threats evolve and impacts strategy, OT technology, and defensive tools. | Title of R&D with Link R&D Title EPSN | ||||||
| Industry Standards and Regulation | Industry Standards and Regulation | Cyber security focusses on risk reduction. Regulatory standards mandate minimum expectations. Multiple security standards and framework are used worldwide and can align strategies with common terms and expectations. | Title of R&D Link [nttps://cnn.com Title of R&D Link] | ||||||
| Protection | |||||||||
| Security Security Architectures and Segmentation | |||||||||
| Vulnerability Management | Hardening | Secure Remote Access | Transient Cyber Assets and Removable Media | Identity and Access Management | |||||