Software supply chain risk assessments touted to bolster utility security posture

摘要

The power sector's approach to software procurement should fall in line with one's thinking when offered a free drink from a stranger in a bar, a former software architect for ISO New England and an expert on energy industry cybersecurity standards said Aug. 12. "You don't know what's in it. Before you consume it, make sure you've done your research and performed a risk assessment," Richard Brooks, co-founder and senior consultant at Reliable Energy Analytics, said during a webinar hosted by Energy Central, an online community for global power professionals. "My tagline is: Never trust software, always verify and report," Brooks added.