SCADA Watch: New Smart Grid Standards Are Out, Complexity Is In
Andy Bochman writes in The Smart Grid Security Blog:
...the new NIST Smart Grid standards draft [.pdf] released today. Far from appearing as an afterthought or not at all, Cyber Security issues are front and center in the executive summary and are described in some detail on pages 71-79 of the document. Also significant is that control system security, which some feel is getting short shrift in this process, is given substantial attention and weighting, with a list of applicable security-related standards on page 79.More here.
As the diagram above illustrates, however, complexity itself may ultimately become the biggest security challenge. The best human minds, augmented with the most sophisticated tools, will have a monumental task keeping track of the myriad threat vectors and security controls deployed to defend against them.
Image source: U.S. National Institute of Standards and Technology (NIST)