Cyber Attack Task Force - Final Report - NERC

More documents

Recommendations

Info

References NERC CATF Roster - Contributors Last Name First Name Company Abell Charles Ameren (Vice Chair) Allen Ron AEP Assante Michael NBISE Baumken David Public Safety, Canada Berrett Dan DHS Bowe Tom PJM Brindley Stuart NERC Diebold Stephen KCP&L Dunfee Rhonda DOE Eng Carl Dominion Engels Mark Dominion (Chair) Fabro Mark Lofty Perch Goff Ed Progress Energy Gray Jeff DHS Hintermister Fred NERC Ingoldsby Terry Amenaza Johnson Michael APX Power Markets Kulseth Christopher MRO Le Bao Coalfire Systems Lemay Francois Hydro-Quebec Miller Ben NERC Morgan Jeff FBI Roberts Don Southern Roxey Tim NERC Ryan Kelly NERC Whitney Tobias GE Energy NERC CATF Roster - Observers Last Name First Name Company Anderson Jeff Open Access Technology International Anne Pramod NextEra / FPL Bacik Sandy Enernex Batz Dave EEI Braendle Markus ABB Brake Lloyd DOD Brain Steve Dominion 42 Cyber Attack Task Force Report
Last Name First Name Company Breed Ryan ERCOT Bugh Larry RFC Calder John Dominion Ciliberti Carlo Lockheed Martin Crabtree Jeff MRO Dakin Rick Coalfire Systems Dodd Gary Bonneville Power Administration Eigenhuis Scott Puget Sound Energy Falkovich Mikhail PSEG Farmer Randy Lockheed Martin Flowers Tom EPRI Frank Daniel Sutherland Freese Jerry AEP Fuller Jeffrey Dayton Power & Light Gaudette Marc Dominion Goodrich Greg NYISO Gordon Bill AEP Harriman Bob BC Hydro Haskins Linda Dominion Kemp Karen Direct Energy Keoseyan Scott Deloitte and Touche King Morgan WECC Kingbaum Forrest Bonneville Power Administration Lackey Kevin ERCOT LaVoy Lanse DTE Energy, Inc. Lim John Consolidated Edison Loftis John Dominion McGlynn John PJM Parcel Sean AEP Raesis George Entergy Rosenstiel Richard Exelon Shah Ashish Deloitte and Touche Stockton Paul DOD Tibbs Clark Vertical Horizons Webber Laurent Western Area Power Administration Wells Rita INL Weiss Joe Applied Control Solutions Whitney William Garland Power & Light / City of Garland Williams Ramsey PG&E Willson James DOD Woodzell Matt Dominion References Cyber Attack Task Force Report 43
Page 1 and 2:
Cyber Attack Task Force Final Repor
Page 3 and 4: Table of Contents Table of Contents
Page 5: Denial of Service - EMS application
Page 8 and 9: Executive Summary Defining a Coordi
Page 10 and 11: Executive Summary Key Recommendatio
Page 13 and 14: Executive Summary Introduction A hi
Page 15 and 16: Adversaries, Motivations, and Capab
Page 17 and 18: Adversaries, Motivations, and Capab
Page 19 and 20: Low Level Threat Criminals, Hackers
Page 21 and 22: Cyber Threat Group Foreign State Na
Page 23 and 24: What a Coordinated Attack Looks Lik
Page 25 and 26: Expanding each of the two events: S
Page 27 and 28: Detection Capabilities Global Monit
Page 29 and 30: Detection Capabilities Appendix F c
Page 31 and 32: Defensive Capabilities / Deterrence
Page 33 and 34: For example: Defensive Capabilities
Page 39 and 40: Responses to Attack Responses to At
Page 41 and 42: Responses to Attack staff to locati
Page 43: Responses to Attack Entities that u
Page 46 and 47: Recommendations • Continue to dev
Page 48 and 49: Recommendations node attack. At a m
Page 50 and 51: Outreach Outreach Outreach is an im
Page 52 and 53: References References Name Link DOE
Page 56 and 57: Appendix A: Introduction to Attack
Page 58 and 59: Appendix B: Resources Appendix B: R
Page 60 and 61: Appendix C: Cyber Event Scenarios f
Page 66 and 67: Appendix D: Acronyms Appendix D: Ac
Page 69 and 70: Appendix E: Potential Responses to
Page 71 and 72: Appendix E: Potential Responses to
Page 73 and 74: Appendix F: Precursors and Local In
Page 75: Appendix G: Isolation and Survivabi
Page 78 and 79: Appendix H: Defensive Capabilities
Page 80 and 81: Appendix I: CRPA Observations and R
Page 82 and 83: Appendix I: CRPA Observations and R
Page 84 and 85: Appendix J: Case Studies to underst
Page 86 and 87: Appendix J: Case Studies Lateral Mo
Page 88: Appendix K: Task Force Goals and Ob
show all

Cyber Attack Task Force - Final Report - NERC

Create successful ePaper yourself

Delete template?

Save as template?