WEBINAR Strengthening Utility Critical Infrastructure Cybersecurity Under June 4, 2013 12:00-1:30 p.m. Eastern Time Online is authorized by IACET to offer 0.2 CEUs for the webinar. 1
Overview The White House and Congress are increasingly concerned about critical infrastructure cybersecurity. Legislation, hearings, and the President s on cybersecurity will all impact the way that owners and operators of critical infrastructure - including electric utilities - manage cyber risk. This webinar will provide participants with updated information on each of these topics and help participants understand the landscape of requirements and voluntary measures that are likely to emerge in 2013 and beyond. Who Should Attend Utility and energy company staff from the following departments: Control systems Operations and engineering Administrative and support staff Compliance Information technology and information security As well as: Attorneys and regulators Regional entity staff Contractors and vendors Learning Outcomes Identify key aspects of the on cybersecurity Recognize new cybersecurity legislation that impacts utility critical infrastructure Identify key impacts of new government actions on regulatory requirements Identify risk assessment and quantification for assets Discuss technologies needed to detect attacks Recognize how to quantify cybersecurity performance REGISTER 4601 DTC TODAY! Blvd., Suite CALL 800303-770-8800 OR VISIT 2
Agenda Tuesday, June 4, 2013 Overview of the Improving Critical Infrastructure Cybersecurity (February 2013) Update on Cybersecurity Legislation Considered in the 113th Congress, Including : Requirements/incentives for critical infrastructure companies to implement cybersecurity standards Impacts of legislative hearings and investigations on utility critical infrastructure owners and operators how Current Investigations May Impact Future Legislation and Legal Actions legislative and Executive Actions: Impact on existing and future regulatory requirements Explanation of how the effects agency implementation on existing regulatory requirements in the electric sector technical Implications of the on the Utility Industry Risk Assessment and quantification for assets based on threat models Technologies needed for Situational Awareness and ability to detect attacks Metrics for Cyber security performance 4601 DTC Blvd., Suite 800 3
INSTRUCTORS Jacob Olcott / Principal, Cybersecurity / Good Harbor Consulting Jacob Olcott leads the cybersecurity practice at Good Harbor Security Risk Management, where he helps senior corporate executives develop strategic cybersecurity programs to mitigate business risk. Mr. Olcott previously held senior positions in the Senate and House of Representatives, acting as lead negotiator on comprehensive cybersecurity legislation for Senator John D. Rockefeller, IV and serving as Staff Director for the Emerging Threats & Cybersecurity Subcommittee. He is the recipient of multiple awards, including the Federal 100 Award for leaders in Federal government information technology, the SANS Institute National SCADA Security Leadership Award, and the SANS Institute National Cybersecurity Policy Award. He is a graduate of the University of Virginia School of Law and the University of Texas at Austin. Sandeep K. Shukla / Professor of Electrical and Computer Engineering / Virginia Tech Sandeep K. Shukla is a professor of electrical and computer engineering at Virginia Tech, and works at the Hume Center for National Security and Technology located at the Virginia Tech Arlington Research Center in Arlington, VA. He has extensive background in formal methods for designing hardware and software systems, and worked as formal verification expert at Intel corp, before starting as an assistant professor at Virginia Tech in 2002. Sandeep has been working on applying formal methods such as static analysis, model checking, correct-by-construction software synthesis for software security. He also has been working in the area of smart grid security through co-simulation of data communication network and power system, injecting security attacks during co-simulation to simulate effects, and study mitigating measures. He also has been working on other industry sponsored projects in automated event correlation for better intrusion detection in SCADA systems, and application specific firewall synthesis from formal threat models, and software interface models. He is also working on using PMU based state estimators to detect cyber-attacks on grids that have sufficiently many PMUs installed. His most recent research interests include interaction of technology and policy in the cyber security of critical systems. 4601 DTC Blvd., Suite 800 4
Instructional Methods A Web-based PowerPoint presentation and online interactive question/answer session will be used in this webinar. Requirements for Successful Completion of Program Participants must be logged in to the Web conference for its entirety, as well as pass an assessment with a score of 70% or higher to receive continuing education credit. iacet Credits has been approved as an Authorized Provider by the International Association for Continuing Education and Training (IACET), 1760 Old Meadow Road, Suite 500, McLean, VA 22102. In obtaining this approval, has demonstrated that it complies with the ANSI/IACET Standards, which are widely recognized as standards of good practice internationally. As a result of its Authorized Provider membership status, is authorized to offer IACET CEUs for its programs that qualify under the ANSI/IACET Standards. is authorized by IACET to offer 0.2 CEUs for the program. Web Conference Presentations Available on CD CDs are available 48 hours after the Web conference is complete. The cost per CD is $295 (add $50 for international shipments). Upon receipt of order and payment, the CD will be shipped to you. NOTE: All Web conference CD sales are final and are non-refundable. logging in to the web conference After registration, each registrant will receive a confirmation of payment or an invoice, depending on method of payment. Each registrant will also receive an e-mail with appropriate login information and more information regarding the event 24 hours prior to its start. To log on, you will need a computer with a broadband connection and audio system. what is a single site connection? A site connection allows a single connection to the Webinar. That connection is open to any number of users in a collaborative setting. Because there are no travel expenses and only a single registration fee is required, each additional participant lowers the cost per participant significantly. By purchasing a site connection, you can invite as many people as you would like to view and participate in the session from a single location. Set up the session in a conference room and project the presentation and chat on a large screen. You also have rights to distribute copies of the presentation materials to everyone involved. Please note that audio is received via the computer sound system and must be broadcast to your group. If for any reason a relevant stakeholder cannot co-locate for the session, we encourage you to include that person by purchasing an additional connection at the reduced fee of $195 per session. This will ensure that every member of a team receives the same relevant, timely information in the most efficient way. If you have any technical or purchasing questions, please contact us at 303-770-8800. Start Time: 12:00 p.m. Eastern Time United States Regional Start Times: 9:00 a.m. Pacific :: 10:00 a.m. Mountain :: 11:00 a.m. Central :: 12:00 p.m. Eastern Use the time zone converter (http://www.timezoneconverter.com/cgi-bin/tzc.tzc) to find your correct start time. REGISTER 4601 DTC TODAY! Blvd., Suite CALL 800303-770-8800 OR VISIT 5
REGISTRATION INFORMATION Mail Directly To: Electric Utility Consultants, Inc. () 4601 DTC Blvd., Ste. 800 please register the following Strengthening Utility Critical Infrastructure Cybersecurity Under June 4, 2013: US $345 Early bird on or before June 3, 2013: US $295 ADDITIONAL CONNECTION: US $245 EARLY BIRD ON OR BEFORE June 3, 2013: US $195 EACH NUMBER OF ADDITIONAL CONNECTIONS: Web Conference Presentations Available on CD CDs are available 48 hours after the Web conference is complete. The cost per CD is $295 (add $50 for international shipments). Upon receipt of order and payment, the CD will be shipped to you via regular USPS mail. ENERG ZE WEEKLY s Energize Weekly e-mail newsletter compiles and reports on the latest news and trends in the energy industry. Newsletter recipients also receive a different, complimentary conference presentation every week on a relevant industry topic. The presentations are selected from a massive library of more than 1,000 current presentations that has gathered during its 26 years organizing conferences. Sign me up for Energize Weekly. How did you hear about this event? (direct e-mail, colleague, speaker(s), etc.) Print Name Job Title Company What name do you prefer on your name badge? Address City State/Province Zip/Postal Code Country Telephone Email List any dietary or accessibility needs here CREDIT CARD Name on Card Account Number Billing Address Billing City Billing State Billing Zip Code/Postal Code Exp. Date Security Code (last 3 digits on the back of Visa and MC or 4 digits on front of AmEx) OR Enclosed is a check for $ to cover registrations. All cancellations received on or before May 17, 2013, will be subject to a US $195 processing fee. Written cancellations received after this date will create a credit of the tuition (less processing fee) good toward any other event or publication. This credit will be good for six months. In case of event cancellation, s liability is limited to refund of the event registration fee only. For more information regarding administrative policies, such as complaints and refunds, please contact our offices at 303-770-8800. reserves the right to alter this program without prior notice. 4601 DTC Blvd., Suite 800 6