Today’s LiveWire Spotlight evaluates a NERC/FERC joint cyber study conducted in the hope of identifying the best practices specific to the cyber incident response plans developed by Registered Entities.  The joint team organized their observations and findings into four buckets corresponding to the phases of the incident response process outlined in NIST Special Publication 800-61.

The advent of cyber warfare has greatly increased the odds that operational technology networks will be unavailable during restoration.  SCADA/EMS have been explicitly targeted by hostile governments, and NERC believes generator control systems are next on the list.