Cybersecurity Myths on Power Control Systems: 21 Misconceptions and False Beliefs

This paper presents and analyzes a selection of 21 “myths” identified from the authors' experience as being the most common in power utilities and the most harmful to their cybersecurity posture. For each one, tangible and referenced elements, typically sparse and dispersed, are presented in this single and up-to-date reference to support their rationalization. This paper also provides generic recommendations supporting power utilities on the ongoing and challenging process of dispelling the identified myths.