Contents #

Executive Summary #

Acknowledgements #

Introduction #

Risk Management #

• The Emerging Cyber Threats to Industrial Control Systems (ICS) – Supply Chain Cybersecurity
  Camilo Gomez, Global Cybersecurity Strategist, Yokogawa

• Standards on Third-Party Risk Management and Cyber Risk Assessment Methodologies
  Frances Cleveland, President and Principal Consultant, Xanthus Consulting International
  Gigi Pugni, START 4.0 Competence Center

• Conducting Cyber Risk Assessments for Supply Chain Risk Management
  Frank Honkus, Associate Director of Intelligence Programs / Director of the Cybersecurity Risk Information Sharing Program (CRISP), E-ISAC
  Mikhail Falkovich, Chief Information Security Officer, Con Edison

Asset Management #

• Best Practices for Secure Remote Access and Cloud Security in the Electricity Sector
  Justin Searle, Director of ICS Security, InGuardians

• Defensible Architecture and Asset Management for Electric Utility Cybersecurity
  Markus Mueller, Principal Industrial Consultant, Dragos
  Jason Shea, Senior Cybersecurity Manager, Southern California Edison

Governance, Policies, and Planning #

• Cybersecurity Incident Response Plan Development
  Michael Martin, Control Systems Engineer, Chelan County PUD
  Tony Assan, Head of IT, GRIDCo (Ghana)

• Governance, Policies, and Procedures for Third-Party Cybersecurity Risk Management
  Terri Khalil, Senior Consultant, Ampyx Cyber (formerly Ampere Industrial Security)
  Roland Miller III, Ambassador for Cyber Florida, The Florida Center for Cybersecurity

• Managing Cybersecurity Risks in a Rapidly Expanding Electric Grid
  Anuj Sanghvi, Researcher III-Cyber Security & Resilience, National Renewable Energy Laboratory (NREL)
  Ginger Wright, Cyber-Informed Engineering Program Manager, Idaho National Laboratory (INL)

Procurement #

• Leveraging Procurement for Cybersecurity Resilience
  Frank Harrill, Vice President of Security, Schweitzer Engineering Laboratories (SEL, Inc.)
  Jacob Phillips, Midcontinent Independent System Operator (MISO)

• Coordinating Cybersecurity Risk Management with Hardware/Software Vendors
  Claudia Iannazzo, CEO and Founder, Catalisto
  Sokol Mukaj, Chief Information Officer, KESH (Albania Power Corporation)

Appendixes #

• Acronyms
• Cybersecurity Supply Chain Checklist