What’s on First? New Insights in NIST’s First Draft

Impacts on integrity were rated as "High" in every single instance. Categories 10-12 show a range of impact levels, but each include "High" for Integrity.  Whether because corrupted data could degrade the operation of the grid, or because it could be used to defraud customers, suppliers, or the market, integrity showed up as the Number 1 concern, with no exceptions, according to the NIST results.

Conclusion 2: B2B and Control System Connections Have the Highest Risk

There were only two categories which ranked with "Highs" across the board, for Confidentiality, Integrity, and Availability, and both could be described as connections between different kinds of systems. The categories are numbers 6 and 7, relating to B2B and control/non-control systems respectively. This feels right intuitively, but it also represents a potential area of rapid growth in both members and risk for the Smart Grid. It describes the connections that are both most likely to be leveraged by new entrants and which are most likely to use either IP, or actual Internet-based, networking. As we have written about before, the Soft Grid is probably the next big area of investment and expansion, as organizations form to leverage the new infrastructure and public enthusiasm to deliver more interesting and likely complicated applications.

In the remarkable depth and detail of the NIST report, it is very possible to become discouraged by the references to "hundreds of standards" and by the complexity of the diagrams it contains. It is important to have a sense for where to begin, as the NIST process will necessarily be a lengthy one, and time (and Smart Grid Investment Grants) are waiting for no one. Focusing on these few issues from the start may be the best preparation for the new documents, threats, and requirements that are certain to follow.

Jack Danahy and Andy Bochman are authors of the Smart Grid Security Blog.

   Email Jack Danahy

   Smart Grid Cyber Security Strategy and Requirements Draft (PDF)

   NIST's Smart Grid guidance on interoperability (PDF)