6.1.a. ERMUSR 11-18-2014 - Laserfiche WebLink

Home Browse Search

with new methods to detect and mitigate information risk, the mounting shifts in the security landscape are creating new challenges that need to be addressed," said Michael Gomez, Advisory principal, KPMG LLP (U.S.). "We recommend you don't put off what needs to happen today." Business Continuity Management and Good Communication Power disruptions inevitably do occur, and when they do, it is important to have a regularly tested set of business °$ �{ continuity management plans that once activated, ,�� A ensure some level of delivery system operations during -- • '4s'ca - • abnormal conditions, while the recovery activities are o�; being completed. Key to these plans is to have a strong communication plan. This plan includes plans for each f7 "� • of the key stakeholders such as customers, mayors and other municipal officials, and the media. When power is disrupted, all parties want information in real time. Being timely and transparent with the right information is essential. Those are tenets for a utility's success with social media. Use it but use it wisely. The speed in which social media operates is a double-edged sword. While you can provide a nimble response during Revisiting Your Security Plan power outages for your customers, they are also developing instant opinions based on how you perform The security risk landscape that utilities face is in a and will share their thoughts for all to see. Be accurate and constant state of flux. In fact, the Federal Energy useful in times of power disruption. Do social media right, Regulatory Commission in March 2014 directed that a and you are leveraging a powerful tool to your advantage. standard be developed that addresses physical security threats and vulnerabilities. FERC laid out a strategy it feels Enhancing Risk Management of Power offers utilities flexibility-focusing on your most critical Supply Disruptions facilities, incorporating risk management and affirming In light of the evolving threats to your business, consider "foundational" physical security efforts. Gerry Cauley, the following questions: president and chief executive officer for the North American Electric Reliability Corporation wrote, "NERC Have you incorporated a risk view into your commends FERC for outlining an approach in this directive capital budgets, maintenance budgets,and asset that calls for a risk assessment to identify critical facilities." management plans? Because the systems and assets that comprise the © How have you leveraged data and analytics in your nation's power grid are vital to growth, safety, and defense asset management plans to better target capital and of the U.S. critical infrastructure, cybersecurity is quickly maintenance budgets and ultimately improve reliability? becoming or should be one of the most important How have you addressed emerging physical and cyber strategic and operational topics in the board room. Fs threats into your risk management strategies? "Even though new security tools, protective Have you updated your significant incident countermeasures, data analytic algorithms, and grid management and communication plans to take health monitoring mechanisms are providing organizations advantage of advanced social media tools? KPMG Managing the Increasing Risk of Power Supply Disruptions 19 117