How to Evaluate the Cyber Risk of Emerging Technologies—An Attack Framework for Industrial Control Systems

Additional contributors:
Josh Carlson, Dragos, Inc., Ryan D. Quint, PhD, PE, North American Electric Reliability Corporation, Mohammad Reza Khalghani, PhD, Florida Polytechnic University

Emerging technologies provide grid planners, operators, and engineers with opportunities to lower costs, increase performance, and improve reliability—among many other possible benefits. However, it is crucial that these entities thoroughly assess potential security risks associated with adopting new technologies.

While there are some existing frameworks related to evaluating emerging technology, a gap exists specifically within the power system operational technology (OT) space.

In this webinar, experts from SEL, Dragos, the North American Electric Reliability Corporation (NERC), and Florida Polytechnic University introduce an evaluation framework for power system OT environments. They discuss topics including:

• How emerging technologies provide exciting opportunities—but require due diligence in evaluating security vulnerabilities.
• Existing challenges that make it difficult to evaluate risk for emerging technologies.
• The ICS Attack Framework for emerging technology, which can help power system entities effectively and uniformly assess risks and weigh these risks against potential benefits.

Date held: Wednesday, March 23, 2022