Draft Guide to Smart Grid Cyber Security Released

SEATTLE - The University of Washington, in cooperation with The Boeing Company, Microsoft and Verizon Business, on July 20 will host a preview of the National Institute of Standards and Technology Interagency Report (NISTIR) 7628, Guidelines for Smart Grid Cyber Security.

"Cyber security is a critical component of the Smart Grid effort, and the release of these guidelines will help policy-makers, utilities, service providers and others who will need to collaborate to make this a reality" said Annabelle Lee, a National Institute of Standards and Technology (NIST) senior cyber security strategist and chair of the Smart Grid Interoperability Panel Cyber Security Working Group.

The meeting will provide a forum for interested parties to learn about the forthcoming guidelines that will be published to address security and privacy of the Smart Grid. Designed to build awareness of cyber security as a critical component of Smart Grid development, it is the first in a series of open meetings with organizations responsible for planning, developing, integrating, or executing cyber technology for the Smart Grid.

The evolving Smart Grid ultimately will comprise a vast array of devices and systems with two-way communication and control capabilities, requiring more advanced protocols and other standards. Anticipated Smart Grid benefits include improvements in the efficiency of energy use and distribution, greater independence of sections of the grid and improved resistance to attack.

In the Energy Independence and Security Act (EISA) of 2007, Congress established the development of a Smart Grid as a national policy goal. Under EISA, NIST is directed to "coordinate the development of a framework that includes protocols and model standards for information management to achieve interoperability of smart grid devices and systems" as well as maintain the reliability and security of the electricity infrastructure.

The draft Guidelines for Smart Grid Cyber Security (NISTIR 7628) was written by members of the Cyber Security Working Group (CSWG), which is part of the Smart Grid Interoperability Panel (SGIP). The SGIP is a partnership launched by NIST to coordinate and sustain development of standards for the Smart Grid.

The SGIP-CSWG has more than 450 volunteer members. The result of more than 15 months of effort, numerous national workshops, and two rounds of formal public review, the soon-to-be-completed report provides guidance for government, regulatory organizations, industry and academia on Smart Grid cyber security.

The Center for Information Assurance and Cybersecurity (CIAC) at the UW is hosting the event as one hub of a nexus of forward-thinking communities of government and private-sector researchers and practitioners in the Pacific Northwest. CIAC collaborators and partners include colleges and departments from the University of Washington and University of Idaho, utilities, state governments in Washington, Idaho and Oregon, and Fortune 500 companies in the private sector.

"The need for sound security policy regarding a smart grid is urgent: even now, there are constant and significant threats to our critical infrastructure," said Dr. Barbara Endicott-Popovsky, director of CIAC, housed at the UW Information School. "What CIAC and its progressive group of collaborators have tried to do is bring together stakeholders from areas involved in energy policy and security to get in front of this challenge."

The Chief Technology Officers of Washington State and Idaho, and leaders from Washington state government, utilities throughout the region, utility vendors impacted by the new guidelines, and cyber security experts from the region are expected to attend the meeting.

The individuals from the SGIP-CSWG management team who will be attending are:

Chair - Annabelle Lee - NIST
Vice Chair - Alan Greenberg - Boeing

In addition to Boeing, Microsoft and Verizon Business, the event is also being underwritten by Creation Logic, Pacific Northwest National Laboratory and University of Washington Information Technology. To download a full copy of the report, please visit ciac.ischool.washington.edu.

About the Event Sponsors

University of Washington Information School
Media Contact: David Shepard; shepard1@uw.edu; 206-221-6182
The University of Washington Information School, or "iSchool," is shaping the ways people create, store, find, manipulate and share information. Our work helps people address information challenges more ethically, effectively and with a heightened sense of possibility.

The Boeing Company
Media Contact: Jenna McMullin; jenna.k.mcmullin@boeing.com; 703-414-6325
A unit of The Boeing Company, Boeing Defense, Space & Security is one of the world's largest defense, space and security businesses specializing in innovative and capabilities-driven customer solutions, and the world's largest and most versatile manufacturer of military aircraft. Headquartered in St. Louis, Boeing Defense, Space & Security is a $34 billion business with 68,000 employees worldwide.

Creation Logic
Media Contact: Michael Simon; msimon@creationlogic.com; 206-819-1396
Creation Logic is a consulting organization in the area of information assurance policy and business integration; building on 20 years of success integrating risk management strategies with transformative agile business practices.

Media Contact: Microsoft Rapid Response Team: rrt@waggeneredstrom.com; 503-443-7070
Founded in 1975, Microsoft (NASDAQ: MSFT) is the worldwide leader in software, services and solutions that help people and businesses realize their full potential.

Pacific Northwest National Laboratory
Media Contact: Greg Koller; greg.koller@pnl.gov; 509-372-4864
PNNL is one of the U.S. Department of Energy's (DOE's) ten national laboratories, managed by DOE's Office of Science. PNNL also performs research for other DOE offices as well as government agencies, universities, and industry to deliver breakthrough science and technology to meet today's key national needs.

University of Washington Information Technology
Media Contact: Cindy Brown; cindyb@uw.edu; 206-221-3710
UW Information Technology provides central information technology infrastructure and services for the University of Washington, including information management, data centers, network systems, telecommunications, academic and collaborative applications, technology strategy, and information security. UW Information Technology (UW-IT) provides strategic oversight, planning, and direction of the University's information technology infrastructure, resources, and services. UW-IT has positioned the University of Washington as a recognized leader in the use of technology for learning, discovery, and engagement.

Verizon Business
Media Contact: Debbie Lewis; debbie.lewis@verizon.com; 610-772-5103
Verizon Business, a unit of Verizon Communications (NYSE, NASDAQ: VZ), is a global leader in communications and IT solutions. We combine professional expertise with one of the world's most connected IP networks to deliver award-winning communications, IT, information security and network solutions. We securely connect today's extended enterprises of widespread and mobile customers, partners, suppliers and employees - enabling them to increase productivity and efficiency and help preserve the environment. Many of the world's largest businesses and governments - including 96 percent of the Fortune 1000 and thousands of government agencies and educational institutions - rely on our professional and managed services and network technologies to accelerate their business. Find out more at www.verizonbusiness.com.