Skip to main content

G-Tech

Cybersecurity

Assuring Cybersecurity Compliance at Nuclear Power Plants for a Large Utility Client

A diversified energy company involved in the development and management of energy-related businesses and services nationwide has a need for broad technical and strategic cybersecurity advising in support of a government-mandated compliance initiative for a complex industrial control system specific to the area of the organization.

Assuring Cybersecurity Compliance at Nuclear Power Plants for a Large Utility Client

Approach

Our team was able to support the customer with experienced and credentialed cybersecurity expertise to enable the business pursuit of security and compliance. Our consultants analyzed the customer’s current cybersecurity capabilities and identified gaps in technology, policy and procedures. The specific regulatory requires were from Nuclear Energy Institute (NEI) 08-09 Revision 6, which were based upon NIST SP 800-53 with similar control requirements.

Solution

Our team was capable of supporting the design, architecture and implementation of the technology and policy solutions necessary to address the identified needs and also, were able to mentor and transfer activities to customer personnel when desired. Some areas that were addressed by NEI 08-09 Revision 6 are network security monitoring, perimeter protection, system and device protection and hardening, incident response and vulnerability assessment and remediation.

Results

Our team provided a consistent and trusted advisory presence to the customer in a constantly changing and evolving regulatory landscape. The ability to call upon Subject Matter Experts who are capable of providing compliance guidance and interpretation, as well as having the ability to design, architect and implement solutions that improve cybersecurity for the organization has been immensely beneficial to cybersecurity program management.