Utilities’ cyber survey may be model for other industries

A White House effort to improve the cybersecurity of the nation’s commercial power grid could soon be expanded to other critical sectors, such as transportation and water.

The Energy and Homeland Security departments kicked off the initiative, known as the Electricity Sector Cybersecurity Capability Maturity Model, this year as an effort to assess and improve the security of thousands of utility companies. A key component of the initiative is a self-evaluation survey of more than 300 questions that helps utilities evaluate their cybersecurity, identify gaps and plan how to mitigate risks and implement necessary changes.

Among the questions asked, for example, are whether:

• Cybersecurity requirements are considered when establishing relationships with suppliers and other third parties.
• Personnel vetting, such as background checks and drug tests, is performed at hire for positions that have access to electrical delivery assets.
• Training programs are aligned to support cybersecurity workforce management objectives.