Toward a New Risk-Informed Approach to Cyber Security

摘要

EPRI has developed step-by-step guidance for utilities to assess cyber security measures at power plants, informed by risk. The methodology enables users to allot more time and resources to protect the devices most critical to operations. "We made the business case for EPRI's methodology with our senior management," said Brad Yeates, Southern Nuclear's manager of cyber security for Vogtle Units 3 and 4. "We concluded that this new approach was the most direct and cost-effective one."In a power plant, robust cyber security depends on safeguarding control system components. One critical component is a plant's engineering workstation.