Infrastructure Protection and Security

Infrastructure Protection and Security

Description

The Infrastructure Protection and Security Interest Group (IPS) is a technical forum for utility personnel tasked with the physical and cyber security of generation, transmission, and distribution assets. The program includes both a strategic component – with a focus on security program design, implementation, operation, evaluation, and improvement – and a tactical component, which enables rapid exchange of information and intelligence on an ad hoc basis.

Focus Areas

  • Cyber & Physical Response and Recovery to Incidents and Emergencies
  • Cyber & Physical Security Assets and Threats
  • Cyber & Physical Training for Employees and Contractors
  • Cyber Detection
  • Cyber & Physical New Technologies and Operational Practices
  • Cyber & Physical Security Assessment of Risks
Workshop

Integrated Resilience: Bridging Hydro Operations and Security Risk Management

Sep 18, 2025
We are excited to announce that we are putting together a workshop between the three groups on Integrated Resilience: Bridging Hydro Operations and Security Risk Management Workshop!The objectives of this workshop are to help improve collaboration between our hydropower members and cyber security members. This is an opportunity for members to share their challenges and learn from each other. This will serve as a follow-up to our last webinar; Cyber Security Regulations and IT–OT Convergence held on February 27th, 2024.  Key takeaways from that event are available on the portal page.Questions to be Addressed:Communication strategies and systemsWhere does the cyber security team sit within your organization, and how is communication between the two teams handled?Is there a communication protocol or process in place? Is it a one-way channel or a two-way channel?Communicating critical information between teamsWhat information do hydro personnel need to provide/share with their cyber security teams?What questions do hydro personnel have for cyber security teams?Ensuring assets are operated safely and efficiently – how do cyber/IT procedures affect daily hydro operations?Working with regulatory bodies – how are regulations and required protocols impacting operations? How are they impacting cyber security compliance?Communicating issues in real-timeHow to work together as a team - teaching sessions and/or using drills and disaster recovery planning to enhance awareness and understanding of cross team issues in an actual emergeHow each utility deals with the public divulgation of information on their assetsWhat do utilities publish and what do they keep confidential in order to keep strategic information away from potential attackers?