Contributions to national cybersecurity standards and sector-wide maturity models, developed with the Department of Energy, NERC, and NIST.
Contributions to frameworks and standards that were subsequently adopted across the energy sector and beyond.
Contributed to the development of the original Framework as an energy and operational technology subject matter expert, participating in the workshop series and authoring content. Separately contributed to NISTIR 7628, Guidelines for Smart Grid Cybersecurity, through the NIST Smart Grid Cyber Security Working Group, and served as a voting member of the NIST Smart Grid Interoperability Panel.
Subject matter expert contributor to the White House initiative led by the Department of Energy with the Department of Homeland Security, advising on cybersecurity, business operations and procurement, business systems, control systems, and communications networks. The model was adopted across the electricity subsector and became the basis for the cross-sector C2M2.
Convened and led a large multi-stakeholder group of industry experts working with government agencies and the Department of Energy to address a critical secure remote access vulnerability. The effort resulted in an update to the NERC CIP standards adopted across the industry.
Member of the task force established under NERC's High-Impact, Low-Frequency event work to assess the effect of a coordinated cyber attack on the reliable operation of the bulk power system and to identify improvements to protection, resilience, and recovery. Contributed to the Final Report accepted by the NERC Board of Trustees in 2012.
One of more than eighty energy sector stakeholders contributing to the update of the sector's 2006 roadmap, defining the high-level cybersecurity needs of asset owners and operators and a common path forward.