Cybersecurity Verification & Validation Testing for Energy Delivery Systems – Stakeholder Perspectives and Technical Approaches

As the complexity and connectivity of energy delivery systems (EDS) increase, the associated cybersecurity requirements to ensure their safe and reliable operation also increases. Therefore, it becomes extremely critical to perform a thorough verification and validation (V&V) of EDS products that help monitor, operate, and control our critical U.S. energy infrastructure. A securely developed and appropriately tested product can enhance the security, reliability and resilience of the overall system, and ensure its ability to withstand and survive sophisticated cyber threats. There are a few operational standards like NERC CIP that address cybersecurity aspects in bulk electric system (BES) operations. However, there seems to be a lack of a widely accepted, cybersecurity-focused V&V framework that can be adopted from the beginning of a product’s lifecycle to effectively develop and test the cybersecurity of the operational technology equipment used in the electricity infrastructure, which includes BES as well as distribution systems. In this panel, we intend to bring together a panel of subject matter experts representing the product vendors, energy utilities, and national labs. Each of the panelists being key energy sector stakeholders will talk about their unique perspectives on the needs, opportunities, technical approaches, and available resources such as standards, tools, and techniques for cybersecurity V&V testing of energy delivery systems. We anticipate our panel to provide a synthesis of much needed and valuable technical information on this critical and important topic to advance the overall cybersecurity and reliability of EDS.