MANAGING CYBER SECURITY RISK IS NECESSARY TO ENSURE RELIABILITY OF THE ELECTRIC GRID.
The approach of Nevermore Security is to identify the highest priority risks while providing the most effective cyber security strategies and solutions.
STRATEGY AND RISK MANAGEMENT
Nevermore Security works with utilities to develop/tailor a cyber security strategy and risk management frameworks that are applicable to the unique requirements of the utility operational environment. This may also include performing a risk assessment.
DESIGN AND ARCHITECTURE
Nevermore Security augments the enterprise architecture with a cyber security architecture, including attack vectors, potential vulnerabilities, and applicable response strategies.
SPECIFICATION, GUIDANCE, AND REQUIREMENTS DEVELOPMENT
Nevermore Security assists utilities in developing specifications, guidance, and procurement documents that are tailored to the utility environment.
ASSESSMENTS AGAINST STANDARDS
There is diverse existing cyber security guidance that may be used by utilities. Nevermore Security conducts assessments against various standards such as the Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2).
TRAINING
With the constantly changing technical and threat environments, cyber security training is necessary to increase knowledge and reduce cyber security risk. Nevermore Security trains utility staff, regulators, and users in cyber security. The training may also include tabletop exercises.
APPLIED CRYPTOGRAPHY
One area of critical importance to the security of the modernized grid is cryptography. Nevermore Security provides guidance on implementing cryptographic techniques to ensure confidentiality, non-repudiation, and authentication in the utility environment.
Annabelle Lee’s experience comprises over 40 years of technical experience in IT system design and implementation and over 25 years of cyber security design, specification development, and testing.
Over the last 15 years, she has focused on cyber security for the energy sector. Over her career she has authored or co-authored many documents on cyber security, cryptography, and testing. She began her career in private industry concentrating on IT systems specifications, software testing, and quality assurance.