Leveraging available, widely adopted and proven industry approaches to process control and defense-in-depth security, such as NIST SP 800-53 and 800-82, ISA 99, and the DoD 8500.1, Encari defines the appropriate electronic security perimeters (ESP) for electric utilities. Specifically, each organization’s ESP(s) is uniquely defined by the system functionality, and may be functionally independent of the physically secured location. Working with your organization, Encari will devise the appropriate NERC CIP compliant ESP at the control center, generation, and transmission facilities, using multiple defense-in-depth controls to:

• Define and implement access conditions,
• Enforce only solicited or two-way communications,
• Monitor and respond to activity, and
• Generate audit trails.

The ESP typically is separated into multiple operating enclaves to isolate ports and services on an as-needed basis between computing environments.