Impact of NIST Guidelines for Cybersecurity

The release of Guidelines for Smart Grid Cyber Security1, draft version one, points to the pivotal role cybersecurity will play in the deployment and protection of the smart grid. The document draws from several years of effort by National Institute of Standard and Technology (NIST) staff and other efforts to secure Information Technology systems, and has been adapted for the smart grid by the Smart Grid Interoperability Panel Cyber Security Working Group (SGIP‐CSWG). Version one is scheduled for publication on August 31, 2010. Security practices continue to evolve and the Guidelines document, like NIST’s Smart Grid Interoperability Roadmap2, are considered “living documents”. They will be updated as the industry matures and best practices are identified and refined.
The role of cybersecurity, and security in general, is well known in the industry; essentially we know “why” we need to protect our critical infrastructure from terrorists, hackers, disgruntled or poorly trained employees, and natural disasters. Unfortunately the regulatory structure to provide clear mandates in order to achieve the best protection possible is not so clear. Smart grid technology, along with standards and policies needed to ensure interoperability and resiliency, is still being developed. Utilities are missing clear “how to” guidelines that will protect their existing and next generation systems, meet developing state regulations in order to recover the costs of their investments, and provide confidence that smart grid deployments will provide the benefits to consumers and shareholders alike. And there are potential fines associated with non‐compliance.
For more information, see

UTC's Information Bulletin on the NIST Interagency Report (NISTIR) 7628

.