Traditional IT-style security advice fails to address the threats facing the control systems of modern power plants. Because OT networks in power plants operate large, complex, and dangerous physical processes and equipment, there is a need for a preventative and disciplined approach to protecting the network perimeter of power generation sites. Damaged turbines and transformers cannot be “restored from backups”, and intrusion detection, response and remediation can interrupt the reliable continuity of services.
Such compromise to power generation networks is unacceptable.
In this paper, we discuss modern reference architecture for defense-in-depth network protection of OT networks at power plants, eliminating external cyber risks and enabling disciplined control to protected, reliability-critical networks, including 4 use cases:
- Safe IT/OT integration
- Turbine vendor monitoring
- Protecting relay and safety networks
- Control Center Communications