Cyber Security and Rural Electric Power Systems

Cyber security is a topic of increasing importance and interest to small utility operators like REA's. The requirement for cyber security is based upon reasons ranging from national security to individual business operations to regulatory compliance. Several fundamental concepts can guide an operator when implementing a cyber security plan. Operators must consider the competing requirements of confidentiality, integrity, availability, and cost. They must consider the potential levels of impact for an incident. While implementing a cyber security plan, operators will constantly identify adversaries, threats, vulnerabilities, consequences, and risks. They will implement physical, technical, and administrative controls to protect networks and other assets, detect attacks, respond to those attacks, and recover from any damage. The process will be continuous, as operators respond to the changing environment.