Characterizing cyber tools for monitoring power grid systems: What information is available and who needs it?

The power grid is a complex, interconnected system that requires the coordination of multiple entities to ensure the reliability of the system. System operators must be aware of the impacts of various natural and man-made contingencies through telemetry from their control systems, and they must also be aware of the integrity and availability of the cyber assets on their systems. A team of researchers from Pacific Northwest National Laboratory and Idaho National Laboratory have conducted a series of observations and interviews at power utilities to identify what information needs to be available for both control room dispatchers and cyber security analysts to maintain situation awareness of cyber security to effectively monitor the cyber assets on utility control systems. The researchers interviewed and observed control room dispatchers and spoke with regional control system engineers and cyber security analysts to define the context in which such information would be used. The results of this work will inform the design of a tool that will enhance cyber situation awareness and help facilitate effective communication between the various personnel and organizations with utility and other regional authorities during contingencies.