Fundamentals of Electrical Substation Cybersecurity Virtual Class

• Recognize and analyze common cybersecurity attacks relevant to substations
• Differentiate between IT cybersecurity and OT substation cybersecurity
• Understand and apply the principles of Defense-in-Depth
• Interpret and apply the NIST Security Framework in OT environments
• Identify typical substation attack vectors and potential vulnerabilities
• Understand the different techniques utilized by intrusion detection systems (IDS): signature-based, learning-based, system-model based
• Configure and monitor a functional security monitoring system using StationGuard

• Case Studies: Cybersecurity Attacks We Can Learn From
• IT vs OT security within substation environments
• Regulatory Overview: FERC, NERC-CIP
• Defense-in-Depth principles applied to electrical substations
• Typica electrical OT substation communications architecture (the Purdue Model)
• The NIST Cybersecurity Framework
• Typical substation attack vectors and mitigation examples
• IPv4 addressing and subnetting
• Introduction to static routing 
• Network Address Translation (NAT/PAT) 
• Introduction to firewalling (Layers 1–4) 
• IPsec/VPN Tunneling concepts
• Intrusion Detection concepts
  • Signature-Based IDS
  • Learning-Based IDS
  • System-model based IDS (StationGuard)
• Vulnerability management and grid visibility (GridOps)

Electrical engineering staff from transmission and distribution utilities, IT and cybersecurity officers from utilities, service companies, and manufacturers involved in protection system design and maintenance

Completion of LAN Design course preferred

• StationGuard
• GridOps 
• DANEO 400
• IEDScout
• StationScout