Security Audit and Assessment for Utilities
Decades
ago, SCADA (Supervisory Control and Data Acquisition) systems were implemented
in public and private utilities with little foresight to security. With the
rapid advancements in computer networks and the constant threat of terrorism,
auditing those systems has become a vital part of national security.
Anitian has extensive experience in performing pre-accreditation audits and
assessments for public utilities to become compliant with the North American
Electric Reliability Council's (NERC) Critical Infrastructure Protection (CIP)
standards. Our audit consists of the following general components.
-
Risk Analysis
Review your organization's exposure to known threats.
-
GAP Analysis
Determine the existing state of your organization and security challenges.
-
Policy and procedure review
Review of all organization security policies and procedures for compliance
with CIP standards.
-
Security assessment
Assess networks, systems and access for security weaknesses.
-
SCADA Systems Assessment
Analyze SCADA systems for security compliance, isolation, and
protection.
-
Standards Adherence
Analyze business against established standards using Anitian's exclusive
Industry Security Maturity ProfilesTM.
-
Overall Compliance Analysis
Review organization for compliance with CIP standards.
-
Remediation Reporting
Report results of audit and develop remediation measures.
-
Implement Security Improvements
Architect and implement necessary security improvements.
-
Train & Educate Staff
Educate staff on proper security practices and procedures.
-
Certify compliance
Assess the effectiveness of security measures and certify their proper
use.
-
Monitoring
On-going monitoring and validation to ensure compliance.
The result is a comprehensive report on the
security health of your organization and SCADA systems. Anitian's reports are clear,
well-organized, and written in clear language. We provide step by step
procedures and suggestions on eliminating or mitigating any problems.
For additional information, please contact our
sales team at info@anitian.com to set up an free, no-obligation meeting.