Keeping the grid safe against cyber threats

Cybersecurity threats continue to be an ongoing concern for electric utilities, government agencies and industry organizations. Rest assured, over the last decade, Great River Energy has taken steps to prepare for cybersecurity threats and continues to keep pace with best practices and technology solutions.

“Today’s reality is that no one is immune from a cyberattack, but Great River Energy has staff that is solely dedicated to security, working hard to keep the grid secure from cyber threats,” said Marc Child, Great River Energy’s director of information security assurance.

Great River Energy has built a solid cybersecurity posture to protect itself against even the most sophisticated cybersecurity threats. This includes a well-known framework, best-in-class technology, comprehensive response procedures, strong industry partnerships and well-trained employees.

Technology is a critical component of any cybersecurity toolbox. Great River Energy invests in the most up-to-date technologies for:

• Monitoring. By integrating multiple security tools into a single platform, the cooperative’s monitoring technologies provide more advanced warning capabilities by reducing millions of alarms down to a manageable, prioritized few.
• Endpoint protection. This technology provides a “first line of defense” against the most likely of attacks — those that target an employee.
• Encryption. This technology ensures any data that could be stolen is unusable.
• Network defense. Monitoring and filtering our information networks ensures only authorized communications are permitted to the most essential transmission and power supply assets.
• Vulnerability management. Deliberate and expedient deployment of essential patches, and regular scanning for security vulnerabilities, ensures reliability and protects technology assets from day-to-day threats.

Great River Energy also has strong partnerships with outside groups and participates in the sharing of intelligence information pertinent to cyber and physical security. Great River Energy’s bulk electric system is tightly integrated with its members’ distribution systems.

“We consider security a team effort,” Child said. “To enable and empower that partnership there are regular and ongoing communications between Great River Energy staff and members where we share best-practices, post-incident lessons learned and defense strategies.”

Great River Energy employees are the best defense against many cybersecurity threats. The organization has well-trained employees and places a great deal of emphasis on building a culture of security among employees and members. This is accomplished through staff that is solely dedicated to security, regular training for all employees and culture-building communications.