Substation Hardening, Security and Monitoring Strategies For Critical Asset Protection, a PNM Case Study Thursday, 7-8AM

Transcription

1 Substation Hardening, Security and Monitoring Strategies For Critical Asset Protection, a PNM Case Study Thursday, 7-8AM Brian Arellano, Project Manager for Advanced Technology & Strategy Department Public Service Company of New Mexico (PNM) Jeffery Fiske, Sr. Systems Integrator TRC Stan Torvik, Senior Engineer TRC 2013 Utilities Telecom Council Transforming Critical Infrastructure

2 Why are we having this discussion? Trust my word and a handshake

3 Advancements in Technology

4 Ready or not the waves are coming

5 ! PNM! Owns and Operates over 3,000 miles of transmission and over 11, 000 miles of distribution.! Over 200 distribution substations! Serving over 500, 000 homes in New Mexico! Generation capacity of more than 2,530 megawatts with a balance of coal, natural gas, nuclear, wind and solar generation! Active participation in research! Cyber Security, Distributed Generation, Station Security, Energy Storage, etc.

6 ! Station Security Project Team! PNM! Brian Arellano, PNM Project Manager, Advanced Technology Group! PNM SME Participating Organizations! Corporate Security! Telecommunications! Business Technology Services! Enterprise Architecture! Environmental Services! Crafts Substation! NERC Compliance! Regulatory Compliance

7 ! Station Security Project Team (continued)! TRC Engineers, Inc. (100 offices, 3000 resources)! Richard Johnson, TRC Infrastructure Project Manager, Principal Engineer! TRC Albuquerque, New Mexico Office! Jeff Fiske, TRC Technology Project Manager, Systems Integrator! TRC San Antonio, Texas Office! TRC Subcontractors! NextGen Security, Inc.! Systems With Intelligence, Inc. (SWI)! Totus Lighting, Inc.! Valmont Structures, Inc.! Purcell Systems, Inc.! Prime Electric, Inc.

8 ! Project Scope! Focus of this project is on Physical Security! Cyber Security is being addressed by separate PNM Team! Project Team acknowledges the critical importance of both! Security Equipment configured to comply with PNM Standards! Engineering, Procurement, and Construction (EPC)! One Stop Shop - Accountability! Flexibility of Pilot environment! Work thru problems with eye to the future! Build vendor relationships! Facilitate Integration of technology real customer input

9 ! Business Case! Critical Infrastructure Electric Utility! National Focus on Critical Infrastructure Protection! Regulatory Imperative NERC CIP V5, NISTIR 7628! Presidential Directive #21 Critical infrastructure and Resilience! Utility Stewardship - Operational Continuity! Utility Asset Protection! Exposure and Damage to Long Lead Time assets! Cost to fix and/or replace is very high! Safety of Employees and Community! Loss of function or physical parts can create hazardous conditions! Compromise of electrical network assets

10 You may not be able to see the top but you have to start somewhere

11 ! Security Technology & Physical Hardening Deployed What do we consider? Physical Hardening! Chain Link vs 10 Concrete vs hardened mesh! Concertina wire! Reinforced Gates and fencing! Gate designs (coordinate with security technology)! Neighborhood proximity/conditions! Security Technology! Components need to be substation hardened! Interoperability Need to work with system architecture! Enable proactive detection not reactive! Local site deterrence such a smart lighting and audio

12 ! Technology Deployed (continued)! Access Control ready! Chains and locks! RFID access control! Card and Biometric Control! NERC sign in/out logs! Wired vs wireless control! Database validation/expiration! Rapid changes required to defeat vindictive actions

13 ! Technology Deployed (continued)! Digital Video Recording Server! Computing power to process analytics and controls! Interface flexibility! Interoperability standards - secure protocols! Digital Video Management System! Central Security Operations (Enterprise or Operations Center)! Report by exception (save back-haul bandwidth)! Real-time Query! Archive Server! Permanent record! Legal Trail

14 ! Technology Deployed (continued)! Video Cameras - benefits! Thermal detection (personnel vs asset monitoring)! Motion detection! Infrared detection! Analytical features asset protection! Full motion pan, tilt, zoom! Overlapping coverage! Connection to lighting controllers! Video storage (Local and Central Archive)! Silent transmissions backhaul limits! Event transmissions backhaul capacity

15 ! Technology Deployed (continued)! Lighting! Daylight Quality (improve picture quality)! Controllable (variable intensity)! Down-tilt shields for neighborhood protection! LED vs Sodium vapor vs incandescent! Surprise flash patterns! Dynamic for event highlight! Perimeter vs Interior Lighting

16 ! Technology Deployed (continued)! Sound! Loud alarms/sirens! Voice messages from God! Synchronized with lighting! Audio Analytics

17 ! Lessons Learned! Standards! NERC CIP Standards vs future (goal is make ready for V5)! Customer Relationships! Pilot allowed for flexibility! Cross-functional team members! Executive Sponsorship! Consultant Relationships! Full Accountability! Transparent sharing of information! Vendor Relationships! Show me the money! Build trust and accountability! Deliver on commitments

18 ! Lessons Learned (continued)! Supportive Tools are no guarantee for success! Policies! Procedures! Execution of Duty! Training (change management)! Entire Workforce! May require additional steps to daily work patterns! Teamwork (changed responsibilities)

19 Questions? Brian Arellano PNM: Jeff Fiske TRC: Stanford Torvik TRC: