Perspectives on Security and Resilience

November 2025. Treating NERC CIP as an audit checklist produces programs that pass audits but struggle against real threats. The article outlines three moves: evolve the electronic security perimeter toward Zero Trust, shift to continuous, risk-based vulnerability management and OT threat hunting, and have GRC and engineering pre-approve secure designs for smart grid and DER projects.

September 2018. Breakers and relays protect physical equipment, but malware that alters sensor readings, PLC commands or HMI feedback can leave operators looking at normal-looking but false values. The article explains why monitoring live traffic across industrial protocols matters.

September 2018. The smart grid links generation to consumption, yet many of its control systems were not designed for modern threats. The article reviews the challenges, including interoperability between proprietary products, and proposes a layered way to classify security concerns across grid resources and systems.

September 2018. An introduction to the NERC CIP reliability standards for the bulk electric system and a practical path to compliance: identify critical assets, analyze the current state, assess risk, close the gaps and follow a roadmap to implementation.

September 2018. What a vendor-independent public key infrastructure program involves: architecture, deployment, CP/CPS, key and certificate management, and migration between data centres or to the cloud. It also explains why SaaS providers need their own security reviews and continuity planning.

September 2018. Custom security courses and awareness programs, from fundamental and advanced cryptography and PKI to CISSP preparation and security awareness for staff.