By Ernie Hayden CISSP CEH, Managing Principal – Energy Security, Verizon Energy & Utility Practice

I have been a student of electric utility cybersecurity issues for years.  During my tenure with Verizon I’ve continued to study, analyze and offer advice on energy security issues including the “smart grid.”  One security professional I’ve had the privilege to get to know and exchange ideas is Mr. Bob Lockhart, Senior Analyst focused on smart energy and cyber security for Pike Research.  I’ve been and continue to be impressed with Bob’s “sense” of the smart grid security issues and challenges.  And, because of his background as an “on-the-ground” CISO, I really am impressed with his pragmatic perspectives.

This week Pike Research published a seminal white paper written by Bob entitled “Utility Cyber Security – Seven Key Smart Grid Security Trends to Watch in 2010 and Beyond.”  This paper is available free of charge from Pike Research(registration is required).

Seriously, Bob is a solid researcher and I’ve learned to listen to his perspectives.  But, this white paper will certainly raise some eyebrows.  For instance, the opening paragraph of the report says:  “Utility cyber security is in a state of near chaos. After years of vendors selling point solutions, utilities investing in compliance minimums rather than full security, and attackers having nearly free rein, the attackers clearly have the upper hand.  Many attacks simply cannot be defended.”

I think Bob makes a good point and it certainly got my attention.

Anyway, the key sections of the white paper I’d encourage you to pay attention to include:

1. One Size Doesn’t Fit All – Cybersecurity Investments Will be Shaped by Regional Deployments
    
2. Industrial Control Systems – Not Smart Meters – Will be the Primary Cyber Security Focus
    
3. Assume Nothing – “Security by Obscurity” Will No Longer be Acceptable
    
4. Chaos Ahead?  The Lack of Security Standards Will Hinder Action
    
5. Aging Infrastructure:  Older Devices Will Continue to Pose Challenges
    
6. System Implementation Will be More Important than Component Security
7. The Top Five Most Promising Smart Grid Cyber Security Technologies

This 16-page document says a lot about the state of smart grid security.  Take some time to read it, think about it and do something with this information.

This blog was also posted on Think Forward