 
  See your link here
|
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
New Energy Bill Takes on Cybersecurity
or
Other Legislation/Regulation Stories
|
|
|
|
August 15, 2005 (Computerworld) --
The new energy bill signed into law by President Bush last week is expected to have a significant impact on IT departments at power companies. IT executives and experts noted that it allows federal enforcement of upcoming cybersecurity standards.
Under the new law, the Federal Energy Regulatory Commission has the authority to establish a national electric reliability organization with the power to oversee and audit reliability standards.
Instead of developing its own standards, the FERC plans to adopt those set by the North American Electric Reliability Council, said Ellen Vancko, a spokeswoman for the organization. The NERC is a Princeton, N.J.-based voluntary organization that sets standards for the operation and planning of the nation's bulk electricity system.
A spokeswoman for the FERC was unable to confirm the agency's plans last week.
The NERC is developing cybersecurity standards that cover areas ranging from the security of critical cyber assets to personnel screening and training requirements. The standards, known as CIP-002 to CIP-009, have been in the works for the past two years.
Executives from electric utilities and independent system operators (ISO), which oversee regional power grids, recently submitted comments on the third draft of the cybersecurity standards, said Laurence W. Brown, director of legal affairs at the retail energy services division of Edison Electric Institute Inc. in Washington. Brown said a fourth draft of the standards is expected to be voted on this fall.
If the standards are approved by NERC members and the group's board, they will likely go into effect next spring, said Brown. That should give power companies enough time to craft budgets that address the new requirements and create a list of physical and cyber assets that will be audited by the new reliability organization being established by the FERC, he said.
Listing Assets
The biggest challenge for power companies in meeting the upcoming standards, said Brown, is the creation of a list of physical and cyber assets that need to be audited each year.
"The most difficult issue is being able to demonstrate that you have looked at all of the areas that need to be tested and [are] doing the work necessary," said Brown.
For instance, Southern Co. identified its critical assets after the 9/11 terrorist attacks in the U.S., but it will now have to put together a different list to address cyber assets, said Bob Canada, a business assurance principal at the Atlanta-based super-regional power company.
While there may be some overlap with its post-9/11 asset management efforts, the new requirements will demand "a significant effort" to implement effective security controls for some of Southern's facilities, he said. For example, the company might need to restrict workers' access to portions of a computer console or an area of a power plant to ensure that those employees' actions are authorized, he said.
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
 |
| All Zones Application Performance Zone Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone Windows Protection Zone The Enterprise Search Zone Software as a Service Zone |
|
See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
Get this briefing free (a $195 value), for a limited time, courtesy of VeriSign. 
From Laggard to Leader: Transforming the Data Center
Get this white paper now!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- Report: AMD to spin-off manufacturing
- IBM launches Bluehouse, a Facebook for business
- Microsoft scales out SQL Server 2008, wants to 'democratize BI'
- More top stories
 Since You AskedA weekly storage column from storage analyst, Steve Duplessie of the Enterprise Strategy Group |
Eliminate SPAM, Gain Productivity Learn all about the dangers and the costs of spam in all its forms – from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses – and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper now!
See more Whitepapers |
 The Spy FilesFor Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler. Click here to read the latest column by Ira Winkler |
Sponsored Links
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDG Connect
IDG World Expo
Infoworld
The Industry Standard
ITworld
JavaWorld
LinuxWorld
MacUser
Macworld
Network World
PC World
Playlist
Copyright © 2008 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission of Computerworld Inc. is prohibited.
Computerworld and Computerworld.com and the respective logos are
trademarks of International Data Group Inc.
|
