Cybersecurity
-
Connected Plant
Implement Cost-Effective, Zero-Trust Remote Operations to Mitigate Cyber Risks and Maintain Operational Resilience
In January 2021, a hacker accessed the digital infrastructure controlling the water supply for Oldsmar, a Florida city of 15,000 people. The bad actor attempted to manipulate the city’s water supply, exploiting a vulnerability in the company’s IT-grade remote access software to alter levels of sodium hydroxide in the water supply, raising its concentration to […]
Tagged in: -
IIOT
Three Things Utility Companies Need to Do to Prevent the Next Cyberattack
For the better part of the past decade, utility companies have been more concerned with the potential for outages than cyberattacks, but this has changed over the past several months. The Colonial Pipeline ransomware attack and the remote cyberattack on a Florida water treatment plant put cybersecurity top-of-mind and made it clear hackers can do […]
-
IIOT Power
Monitor, Teach, Protect: Three Priorities for Insider Threat Prevention in the Energy Sector
In December 2020, the U.S. Department of Energy announced a new subcommittee focused on the nation’s electric grid. The Grid Resilience for National Security subcommittee was a response to increasing threats to the country’s expansive electric grid that reliably delivers electricity to power the digital age. Today, those threats are even more relevant than ever […]
-
IIOT
Standardized Software Bill of Materials Needed to Power Energy Cybersecurity
COMMENTARY Supply chain security is top of mind these days for policymakers and regulators focused on protecting the utility industry and other critical infrastructure. A cyber vulnerability with a single supplier can take down an entire supply chain network and the entities that use its products. The organizations that support and supply products and […]
-
News
Show Preview: Connected Plant Conference
POWER and Chemical Engineering magazines are hosting the fifth annual Connected Plant Conference (CPC), taking place Aug. 30–Sept. 1, 2021, at the Renaissance Austin Hotel in Austin, Texas. CPC is the only event specifically covering the digital transformation taking place in the power generation and chemical process industries. CPC includes a look at the technology […]
-
Cybersecurity
Biden Signs National Security Memo Addressing Industrial Control System Cybersecurity
The Biden administration is moving to add more safeguards to the nation’s critical infrastructure by establishing a new voluntary public-private collaboration that will focus wholly on industrial control systems (ICS) cybersecurity. The administration formally launched the “Industrial Control Systems Cybersecurity Initiative” in the “National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems” signed by […]
-
Connected Plant
Data Breaches Cost More Than $4 Million Per Incident, Power Industry at High Risk
IBM Security reported on July 28 that the average cost of recent data breaches was $4.24 million per incident, the highest cost ever recorded by the company in 17 years of tracking the metric. Notably, data breaches in the U.S. were by far the costliest, exceeding $9 million per incident on average. The findings were […]
Tagged in: -
IIOT
Zero-Trust Gateways: A New Strategy for Protecting Critical Infrastructure
In early May 2021, a Russian cyber-criminal group hit Colonial Pipeline, the largest U.S. oil and natural gas pipeline system, with a devastating ransomware attack. The exploit maliciously encrypts computer files, making them inaccessible unless the victim pays a ransom. To contain the threat, Colonial was forced to temporarily shut down portions of its operations […]