The Energy Collective Group
This group brings together the best thinkers on energy and climate. Join us for smart, insightful posts and conversations about where the energy industry is and where it is going.
Shared Link
A moment of reckoning: the need for a strong and global cybersecurity response - Microsoft On the Issues
The Solarwinds incursion has damaged government credibility with regard to our ability to defend against sophisticated, nation state cyber threats and software supply chain risks. This posting from Brad Smith of Microsoft has several recommendations that are worthy of consideration, to help prevent more attacks. But one recommendation in particular can have real and immediate effect that improves our collective ability to protect and defend against cyber attacks: First, we need to take a major step forward in the sharing and analysis of threat intelligence.
Of all his recommendations this one, in particular, can be implemented by every person that receives software and can detect potential threats that may be present. We have the facilities to report suspected software via the existing CVE/NVD repositories and other channels, i.e. *-ISAC. We don't need a government mandate to make this happen, but it does take discipline and the ability to detect when risks are present. There are several vendors of software supply chain risk assessment solutions, i.e. SAG-PM, that can help to detect potentially risky software packages. It's up to the consumers of software to take advantage of these solution offerings and help stop the spread of bad software by applying comprehensive software supply chain risk assessments and reporting any issues that are identified, which raise doubt as to the Trustworthiness of a software package.
Energy Central hosted a PowerSession on 8/12 that echo many of Brads points, available on demand at: https://energycentral.com/o/energy-central/demand-energy-central-powersession-series-cybersecurity-us-power-grid-software
A moment of reckoning: the need for a strong and global cybersecurity response - Microsoft On the Issues
The recent spate of cyberattacks require the government and the tech sector in the United States to look with clear eyes at the growing threats we face. At Microsoft, we are committed to being at the forefront of these efforts. A posting by Brad Smith of Microsoft.
- What is the difference between FCEM and AOCE
- Highly Recommended Reading - Capacity Accreditation Reforms
- CISA’s public-private cyber collaborative to focus on energy, water
- Groundhog Day, SEC Style: Proposed Rule On Cybersecurity Risk Governance Has All The Pain Of SOX With Fewer Financial Penalties
Get Published - Build a Following
The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.
If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.
Your access to Member Features is limited.
Sign in to Participate