The mission of this group is to bring together utility professionals in the power industry who are in the thick of the digital utility transformation. 

Post

Inventory of System Vulnerabilities

Barry Jones's picture
Information Assurance, Governance, Risk and Compliance Federal Government - Department of Energy

CISSP-ISSEP: Information assurance, privacy and regulatory compliance program strategies for IT/OT, cloud, apps & mobile. Cybersecurity Information Assurance Manager and Trusted Agent

  • Member since 2019
  • 18 items added with 1,677 views
  • Nov 15, 2021
  • 407 views

I am challenged by the inability to find an inventory of electric generation, transmission and distribution equipment for vulnerability management. That's because it's probably not possible. So how can i build a cyber asset inventory and manage the high and medium vulnerabilities to those assets hardware and software? I recently had a conversation with Tobias Whitney with Fortress Information Security (https://fortressinfosec.com) about it. Seems they have been thinking this all along. A clearinghouse if you will of vulnerabilities for the OT/ICS space. This will be a boon for utilities.

Barry Jones's picture
Thank Barry for the Post!
Energy Central contributors share their experience and insights for the benefit of other Members (like you). Please show them your appreciation by leaving a comment, 'liking' this post, or following this Member.
More posts from this member
Discussions
Spell checking: Press the CTRL or COMMAND key then click on the underlined misspelled word.
Matt Chester's picture
Matt Chester on Nov 15, 2021

How imminent would such an inventory be?

Barry Jones's picture
Barry Jones on Nov 16, 2021

Great comment. With the IoT we need to imagine a world of automated inventory management and end device configuration management. This however requires network connectivity to end points which also raises the risk because the network then becomes discoverable.

Get Published - Build a Following

The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.

If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.

                 Learn more about posting on Energy Central »