July 2017_CEO Newsletter

CEO’s
Corner
GRAND VALLEY POWER ú EMPOWERING LIVES WITH HOMETOWN SERVICE JULY 2017
Cyber security and the state we are in
by Tom Walch | CEO
Headlines about cyber-attacks, computer
hacking and phishing seem to dominate the
news more and more every day. How could
these threats impact cooperative consumers?
Unfortunately, the answer is that a coordinated
attack could bring a distribution systems like
Grand Valley Power’s to its knees. It has happened
before!
About a year and a half ago, hackers attacked
a Ukrainian utility, leaving 230,000
homes and businesses without power. The bad
guys penetrated the utility’s network with an
email phishing campaign targeting employees.
When one of the employees opened a malicious
attachment, the hackers gained entry and were
able to snoop around the network, unlocking
password-protected access points. They eventually
commandeered the system. The utility’s
control center operator watched helplessly as
one of the hackers remotely took over control of
his computer, and with the simple click of a button,
opened a substation circuit breaker, shutting
off power to everyone served by that facility.
The bad guys continued this process until
power had been cut off at 30 substations.
Cyber-crime could also threaten personal
and financial data of cooperative consumers.
We’ve seen how bad guys have stolen this kind
of sensitive information from big outfits like Target,
Home Depot, and even the federal government.
Smaller outfits like Grand Valley Power
may be subject to even bigger risks. We have
an obligation to protect out consumers’ information.
As an electric cooperative member, it’s
important to know what Grand Valley Power
and other cooperatives across the country are
doing to keep the nation’s electric grid—and the

personal information of -our members and consumers—secure.
The state of security now- Fortunately,
America’s electric cooperatives have taken a
leading role on this issue. America’s cooperatives
have spent countless hours helping the
nation’s grid watchdog, known as the National
American Electric Reliability Corporation
(NERC), develop and write the Critical Infrastructure
Protection standards. In addition, the
development arm of NRECA (National Rural
Electric Cooperative Association)- the Cooperative
Research Network (CRN)- has taken it a
step further and authored the Guide to Developing
a Cyber Security and Risk Mitigation Plan.
This document (backed by the U.S. Department
of Energy and endorsed by the head of grid security
at IBM), provides a set of scalable, online
tools that can help electric cooperatives
strengthen their cyber security posture. GVP
currently has a robust infrastructure of safeguards
that include firewalls, multi-factor identification
requirements, and blocks that turn away
suspicious network packages.
Locally- Grand Valley Power was recently
selected as one of the cooperatives in the nation
that will participate in the Self-Assessment
Research Project, developed by NRECA’s Rural
Cooperative Cyber Security Capabilities Program
(RC3). RC3 is focused on developing tools
and resources that are appropriate for smalland
mid-sized cooperatives that have limited
information technology staff. In addition, the
program will provide collaboration, education,
and training opportunities that will be available
to all cooperatives, regardless of size. This project
will help GVP develop and implement a solid
cyber security action plan; we will be positioned
as a leader in cyber security. We will be
ambassadors for protecting personal identifiable
information and grid security for GVP, and
for all other cooperatives.
On a National level- President Trump
recently signed an executive order highlighting
the need to improve federal agency and administration
cybersecurity, focusing on steps that
owners of critical infrastructure can take to protect
against significant cybersecurity incidents.
The order also calls for a government assessment
of a "prolonged power outage" associated
with a significant cybersecurity breach
against the electric power sector.
NRECA CEO Jim Matheson endorsed the
executive order, noting that "A secure grid is
paramount for America's electric cooperatives
and their 42 million consumer-owners. We appreciate
the [Trump] administration recognizing
the importance of cybersecurity, and we look
forward to working together as we continue to
address this critical issue."
Grand Valley Power’s innovative and
principled approach to Cyber-security is
squarely in line with our mission, and will help
ensure that we can continue to deliver value to
all we serve.

The Mesa County Fair is an annual celebration of the county, its
residents, community and history. The Fair creates an environment
that promotes the diversity of the area and features
family oriented entertainment, educational
opportunities and is a showcase of local products
and services. This MUST-DO event held
annually, includes everything from tractor pulls,
rodeo’s, music, kids-zone and more! You won’t
want to miss the 4-H Livestock sale and Parade
of Champions! The Mesa County Fair in Grand
Junction is from July 25th through the 29th
2017. Check out the full schedule online at
mesacountyfair.com
Knowledge Center