Markets We Serve
Markets
Financial
Healthcare
Education
Energy
Retail
Technology
 

NetSPI Energy Practice

NetSPI has established itself as a trusted provider of cyber security and compliance program consulting to the Power & Energy industry. Our clients count on us for in-depth technical assessment, network architecture design and review, system hardening, and independent program gap analysis.

NetSPI focuses on mitigating risk to your business and customers, and on helping you create and maintain a compliant, secure environment. We bring to this critical work a combination of technical excellence, proven processes, and personal integrity to ensure project success and value.

NetSPI Services to the Power & Energy Industry

Cyber Security/Program Effectiveness Assessment

  • Qualified assistance to identify and minimize risk within critical systems, networks, and applications
  • Assessment of security program effectiveness against industry best practices
  • Review of security program components for compliance with NRC/NEI or NERC/FERC requirements

Cyber Security Program Development

  • Qualified assistance for development of cyber security programs based on NRC/NEI or NERC/FERC
  • Assistance establishing programmatic approach to vulnerability management and threat prevention
  • Mapping of program components to security frameworks/standards (NIST, ISO 27001, PCI DSS)

Technical Security Assessment

  • Review of network architecture and security controls based on risk and compliance requirements
  • Extensive capabilities in penetration testing, vulnerability assessment, and system hardening
  • Design and implementation validation for centralized logging/auditing/storage, IDS/IPS, third-party technical requirements, incident handling, etc.

Plant Process Computer System/SCADA System Review

  • Guidance for plant operation control systems obsolescence, and for replacement of proprietary systems with open systems from control and reporting system manufacturers
  • Qualified assistance to validate adherence to NERC CIP security requirements
  • Comprehensive technical assessment solutions with deliverables mapped to NERC CIP requirements
 
 
Case Study

With help from NetSPI, NMC strives for leadership cyber-security program development and deployment.

Request a copy