Hacking and Hardware: Understanding the Threats, Compliance Obligations, and Cybersecurity Solutions for Utilities

Transcription

1 WEBINAR Hacking and Hardware: Understanding the Threats, Compliance Obligations, and Cybersecurity Solutions for Utilities May 2, :00-1:30 p.m. Eastern Time Online is authorized by IACET to offer 0.2 CEUs for the webinar. 1

2 Overview The webinar will discuss how utilities are increasingly the target of attacks by highly sophisticated adversaries. We will look at the harms utilities have already faced and what we are likely to see in the future. This session will also explore the ever-changing aspects of cybersecurity compliance, particularly around changes to NERC CIP. The presenters will describe what has changed, how the scope has expanded, and what the best way for utilities large and small is to deal with these issues - from better controls to greater automation. Finally, cybersecurity solutions that address the evolving threat and help utilities remain compliant will be discussed. Who Should Attend Utility and energy company staff from the following departments: Control systems Operations and engineering Administrative and support staff Compliance Information technology and information security As well as: Attorneys and regulators Regional entity staff Contractors and vendors Learning Outcomes Identify the threat landscape for the energy industry and the need for cybersecurity Evaluate the impact of smart grid technologies on cyber security Examine current CIP standards in detail with in-depth analysis of common gaps and lessons learned in compliance Recognize the implications of NERC CIP standards being applied to distribution-level systems Demonstrate an enterprise-wide program to support cyber security and NERC CIP compliance REGISTER 4601 TODAY! DTC Blvd., CALL Suite OR VISIT 2

3 Agenda Thursday, May 2, 2013 Current cybersecurity threats facing electric utilities Common vulnerabilities and consequences An update on new cybersecurity regulations, such as NERC CIP, and recently released Presidential Executive Order on cybersecurity (February 2013) Predictions of future cybersecurity challenges INSTRUCTORs Gib Sorebo / Vice President and Chief Cyber Security Technologist / SAIC Mr. Sorebo is a Chief Cyber Security Technologist and Vice President for SAIC where he assists government and private sector organizations in complying with legal and regulatory requirements and advises customers on ways to reduce cybersecurity risks. He has been working in the information technology industry for more than twenty years in both the public and private sector. In addition to federal and state governments, Mr. Sorebo has done security consulting in the financial services and electricity sectors. He has managed and participated in system security certification and accreditation, penetration testing, and vulnerability assessments. He is recognized for his expertise in information security compliance where he has helped government and commercial customers comply with various legal obligations. Additionally, as a former Windows system administrator and network penetration tester, Mr. Sorebo has extensive technical abilities and is familiar with a wide variety of network security tools and exploit methods. He is also a frequent speaker at national security and utility conferences, such as the RSA Security Conference, CSI Annual Conference, Metering America, Autovation, and the FIRST Annual Conference, where he has given talks on information security liability, Sarbanes-Oxley, E-Discovery, and breach notification. He was instrumental in the development of and provided significant leadership and guidance to SAIC s Smart Grid Security practice where he established the SAIC Smart Grid Security Solutions Center for product security testing and solution development and contributed to a variety of other smart grid security research efforts. He is also the co-author of a book on smart grid security. Robert Schuler / Cybersecurity Principal / SAIC Mr. Schuler, CISSP, is a cybersecurity principal of SAIC and has spent 15 years in information security risk management and systems engineering across industries. As an expert in cybersecurity and North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP), he currently manages multi-region NERC CIP compliance efforts at a major independent power producer. He facilitates agreements among business units, helps achieve secure architectures that are business enablers, and tackles a range of complex technical issues. Robert is also addressing the security aspects of NERC CIP, smart grid, and other cyber security implementation efforts DTC Blvd., Suite 800 3

4 Instructional Methods A Web-based PowerPoint presentation and online interactive question/answer session will be used in this webinar. Requirements for Successful Completion of Program Participants must be logged in to the Web conference for its entirety to receive continuing education credit, as well as pass an assessment with a score of 70% or higher. iacet Credits has been approved as an Authorized Provider by the International Association for Continuing Education and Training (IACET), 1760 Old Meadow Road, Suite 500, McLean, VA In obtaining this approval, has demonstrated that it complies with the ANSI/IACET Standards, which are widely recognized as standards of good practice internationally. As a result of its Authorized Provider membership status, is authorized to offer IACET CEUs for its programs that qualify under the ANSI/IACET Standards. is authorized by IACET to offer 0.2 CEUs for the program. Web Conference Presentations Available on CD CDs are available 48 hours after the Web conference is complete. The cost per CD is $295 (add $50 for international shipments). Upon receipt of order and payment, the CD will be shipped to you. NOTE: All Web conference CD sales are final and are non-refundable. REGISTER 4601 TODAY! DTC Blvd., CALL Suite OR VISIT 4

5 REGISTRATION INFORMATION Mail Directly To: Electric Utility Consultants, Inc. () 4601 DTC Blvd., Ste. 800 please register the following Hacking and Hardware: Understanding the Threats, Compliance Obligations, and Cybersecurity Solutions for Utilities May 2, 2013: US $345 Early bird on or before May 1, 2013: US $295 ADDITIONAL CONNECTION: US $245 EARLY BIRD ON OR BEFORE MAY 1, 2013: US $195 EACH NUMBER OF ADDITIONAL CONNECTIONS: Web Conference Presentations Available on CD CDs are available 48 hours after the Web conference is complete. The cost per CD is $295 (add $50 for international shipments). Upon receipt of order and payment, the CD will be shipped to you via regular USPS mail. ENERG ZE WEEKLY s Energize Weekly newsletter compiles and reports on the latest news and trends in the energy industry. Newsletter recipients also receive a different, complimentary conference presentation every week on a relevant industry topic. The presentations are selected from a massive library of more than 1,000 current presentations that has gathered during its 26 years organizing conferences. Sign me up for Energize Weekly. How did you hear about this event? (direct , colleague, speaker(s), etc.) Print Name Job Title Company What name do you prefer on your name badge? Address City State/Province Zip/Postal Code Country Telephone List any dietary or accessibility needs here CREDIT CARD Name on Card Account Number Billing Address Billing City Billing State Billing Zip Code/Postal Code Exp. Date Security Code (last 3 digits on the back of Visa and MC or 4 digits on front of AmEx) OR Enclosed is a check for $ to cover registrations. All cancellations received on or before April 5, 2013, will be subject to a US $195 processing fee. Written cancellations received after this date will create a credit of the tuition (less processing fee) good toward any other event or publication. This credit will be good for six months. In case of event cancellation, s liability is limited to refund of the event registration fee only. For more information regarding administrative policies, such as complaints and refunds, please contact our offices at reserves the right to alter this program without prior notice DTC Blvd., Suite 800 5