Cybersecurity Symposium

Sponsored By:

Cybersecurity is an ever changing landscape. Navigating the issues successfully means that you are keeping up with the latest rules and regulations not to mention the industry trade press reporting on the latest issues facing not only utilities but all companies when it comes to cybersecurity. The pressure is substantial, since an attack on critical infrastructure could be devastating in many ways. The goal of sessions in this symposia will be to provide an overview of utility cybersecurity from the field and offer real, actionable solutions on how you can make sure you are not only in compliance with the regulations and standards, but ensure that your cybersecurity program works.

Complete Program

Relevant Cybersecurity Sessions Include:

Saturday May 19, 2012

3:00  - 5:00 p.m.
Registration Open
Room: Gatlin Foyer

Sunday May 20, 2012

7:30 a.m.
8th Annual Past Chairman's Invitational Golf Tournament
Location: Shingle Creek Golf Course

8:30 a.m. - 5:00 p.m.
Registration Open

9:00 - 9:30 a.m.
Continental Breakfast

9:30 a.m. – 12:30 p.m.
Concurrent Tutorials - More information here

12:30 – 1:30 p.m.
Networking Lunch

1:30 – 4:30 p.m.
Concurrent Tutorials - More information here

Monday, May 21, 2012

6:45 a.m. - 6:30 p.m.
Registration Open
Room: Gatlin Foyer

7:15 – 8:30 a.m.
Concurrent Educational Sessions

Comparing and Contrasting Current SCADA and Telecom Security Solutions
Symposia: Cybersecurity
Track: Technical
Room: Conway
New market technologies to secure SCADA systems make it critical to understand how all of the solutions fit together. Do they overlap, where should they be deployed, and are they effective? We will provide an overview of each type of solution and how it applies to the utility space in six functional areas. This includes: physical security and remote access; network perimeter; SCADA DMZ; control room servers and workstations; SCADA protocols; and embedded controllers. This presentation provides clarity for the end users to better understand where the various SCADA security solutions fit into the overall picture.

Speakers: Peter Allor, PM Intel & Vendor Relations, Vulnerability Coordination, IBM
Andrew Ginter, Director of Industrial Security, Waterfall Security
Jonathan Pollet, Founder and Principal Consultant, Red Tiger Security

8:30 – 9:00 a.m.
Continental Breakfast

9:00 – 10:15 a.m.
Concurrent Educational Sessions

Data Security Developments
Symposia: CyberSecurity
Tracks: Technical, Management, Legal
Room: Conway
As utilities face a data-tsunami from smart grid, they need to understand the legal, regulatory and practical issues for managing data privacy and data security. This session explores the current legal landscape of these issues, including applicable laws, rules, and regulations in the U.S. and in other parts of the world. Additionally, it reviews the “privacy by design” concept that is fundamental to the implementation of new technologies and best practices for ensuring privacy and protecting data at utilities. Find out how to set up the networks in order to meet the standards required for collecting, storing and using the data. Find out how to establish practices and procedures for managing the data to ensure compliance with privacy and security requirements.

Speakers: Tracy P. Marshall, Partner, Keller & Heckman
Eddie Schwartz, CISO, RSA

Cybersecurity in Control Systems
Symposia: Control Systems, Cybersecurity
Track: Technical
Room: Gatlin A4
The security of industrial control systems is the focus of an entire division with DHS. In a coordinated effort between government and private asset owners, cybersecurity training, lessons learned, actionable intelligence, forensic assistance, cybersecurity evaluation tools and risk reduction products are all available free of charge, just for the asking. In addition, the National Energy Sector Cybersecurity Organization (NESCO) is a broad-based, public/private partnership funded by DOE to enable information sharing within the electric community itself on computer and network security. This session will outline what is available to help you meet the unique security challenges of your legacy systems.

Speakers: Motty Anavi, Vice President - Business Development, RAD Data Communication
Chris Jager, Director, Tactical Analysis Center, NESCO
Lisa Kaiser, Control Systems Security Program Director of Strategic Planning, Department of Homeland Security

10:15 – 10:30 a.m.
Networking Break

10:30 – 11:45 a.m.
Concurrent Educational Sessions

Advanced Cybersecurity Protections for Advanced Cybersecurity Threats
Symposia: Cybersecurity
Track: Technical
Room: Conway
Today's advanced threats routinely penetrate firewalls with tactics that include "spear phishing", credential scraping, tunneling through legitimate VPNs and piggy-backing on legitimate communications. Recent advanced attacks, such as Stuxnet, APT, Night Dragon, and Shady Rat appear to have been very successful. There have been no reports of adverse consequences for the authors of those attacks. Given this record of success, security experts expect advanced threats to continue to target SCADA, telecommunications, and Critical Infrastructure systems. Defending against advanced threats requires much more than simply deploying a firewall. This session not only breaks down the recent threats facing SCADA and Telecom systems, but also provides practical advice for similar future attacks.

Speaker: Steven Dougherty, Global Technical Leader - Energy & Utility Security, IBM
Lisa Kaiser, Control Systems Security Program Director of Strategic Planning, Department of Homeland Security
Jonathan Pollet, Founder and Principal Consultant, Red Tiger Security

11:45 a.m. – 12:00 p.m.
Networking Break

2:00 – 6:30 p.m.
UTC EXPO 2012 Open
Room: Gatlin CDE
Visit these great exhibitors!

6:30 –8:30 p.m.
UTC Gala
Room: Panzacola F-G
Party around the world with us as we host a fun networking event. The UTC Gala is a great way to network and meet with your peers and catch up from a full day of education and vendor exhibits. 

8:30 – 10:30 p.m.
After-Gala Chairman’s Cigar Party

Tuesday, May 22, 2012

6:45 a.m. – 6:00 p.m.
Registration Open
Room: Gatlin Foyer

7:00 – 8:00 a.m.
"Power Hour" Education Sessions

The Complicated Web of Cybersecurity
Symposia: Cybersecurity
Tracks: Legal, Technical, Management
Room: Conway
Applying cybersecurity principles to the electric utility domain is not a simple task. Utilities are confronted with a dizzying combination of government and industry mandates, standards and policy recommendations, and local requirements that need to be satisfied – which may or may not work in tandem. Even once you figure all of that out; it's likely the overall cybersecurity implementation may be deficient in application. This session will suggest ways to apply cybersecurity principles in a manner that achieves compliance with government requirements and provides real cybersecurity.

Speaker: Keith Porterfield, General Counsel, Georgia System Corporation
Michael Robinson, Customer Solutions Director, CISCO

10:00 a.m.– 2:00 p.m.
UTC EXPO 2012 Open
Room: Gatlin CDE
Visit these great exhibitors!

11:00 a.m. – 1:00 p.m.
Networking Lunch in UTC EXPO 2012
Room: Gatlin CDE

2:15 – 3:30 p.m.
Concurrent Educational Sessions

Surviving a CIP Audit – Experiences from the Trenches
Symposia: Cybersecurity
Tracks: Management, Technical
Room: Conway
NERC CIP has been an ongoing process for your utility. In fear of major fines, your utility has analyzed the regulations and applied them to different processes and systems throughout the utility. In addition to making the utility more secure, this preparation has been done in order to prepare for a NERC Critical Infrastructure Protection Audit, where fines for non-compliance could be in the millions. This session will feature speakers that are familiar with the NERC Critical Infrastructure Protection Audit process. Hear how the process works and how utilities have managed this process as a practical matter. This session will provide lessons learned which will help with any utility’s audit preparation.

Speaker: Keith Porterfield, General Counsel and Manager of Corporate Compliance, Georgia System Operations Corp.

3:30 – 3:45 p.m.
Networking Break

3:45 – 5:00 p.m.
Concurrent Educational Sessions

The Advantages of an Integrated Factory Acceptance Test in an ICS Environment
Track: Technical
Room: Conway
When adding, modifying or upgrading a system, many critical infrastructures conduct a Factory Acceptance Test (FAT). A FAT includes a customized testing procedure for systems. It is executed before the final installation at the critical facility. Since cybersecurity can also impact safety of critical systems if a system is compromised, it makes sense to integrate cyber security with the FAT, a concept that brings value and savings to an implementation process. This is something that can be applied by both utilities and equipment/service providers as well. Learn how FAT can help with cybersecurity issues before they become problematic.

Speaker: Jerome Farquharson, Burns & McDonnell

Southern California Edison (SCE) Centralized Remedial Action Scheme (CRAS) Project
Track: Technical
Room: Gatlin A4
IP, VPN, Ethernet technologies enable utilities' telecommunications departments to design a highly available network that provides NERC CIP compliance and meets critical low latency requirements, reducing operations, manpower and general administration costs. Utilities are deploying and testing standard Internet Protocol (IP) and IEC61850 GOOSE standard to support time-sensitive applications such as tele-protection and centralized remedial action scheme (CRAS). This session will present LAN and WAN test data along with conceptual design and architecture use cases, documenting how one utility is translating the strengths and benefits of IP and IEC61850 standards into better protecting and operating the electrical power grid in real-time.

Speakers: Anthony Karian, Senior Engineer, Southern California Edison
Bruce Le, Consulting Telecom Engineer, Southern California Edison
Dane Speakman, CSA, CISCO

5:00 - 6:00 p.m.
Focus on 700 MHz Public Safety Broadband Network – Legal, Technical and Practical Implications for Sharing
Tracks: Technical, Management, Legal
Room: Gatlin A3
Utilities can share the 700 MHz Public Safety Broadband Network (PSBN), thanks to Title VI of the Middle Class Tax Relief and Job Creation Act of 2012 (PL 112-96) which became law on February 21, 2012. Potentially, utilities could access up to 20 MHz of spectrum on a shared basis, which would help them meet their increasing communications needs for wide-area, high capacity voice and data. During this informative and interactive session, UTC experts will provide an outline of the opportunities available,the challenges associated with those opportunities, and the best strategies for utilities to ensure that the network will meet their communications needs.

Speakers: Brett Kilbourne, Vice President, Government and Industry Affairs and Deputy General Counsel, UTC
Prudence Parks, Director, Government Affairs and Legislative Counsel, UTC

6:30 – 7:00 p.m.
UTC Awards Dinner Reception
Room: Panzacola East Foyer

7:00 – 9:00 p.m.
UTC Awards Dinner
Room: Panzacola F
The UTC Awards Dinner celebrates the achievements of individuals and utilities involved in UTC and the industry. Come join us for a semi-formal sit-down dinner as we honor individuals for Chairman’s Awards, the Dondanville Award the Meehan Award, as well as the UTC Apex Award presentation. It's a great night to celebrate!

Wednesday, May 23, 2012

7:30 - 10:30 a.m.
Registration Open
Room: Gatlin Foyer

8:00 a.m.
UTC Fiber Optic Professional Certification & Training

8:30 – 9:30 a.m.
Innovation in Practice - UTC Annual Membership Meeting & Breakfast
Room: Gatlin B
As part of UTC's Annual Conference we hose a UTC Annual Membership Meeting where members are encourage to share their opinions, hear from their volunteer leaders and vote for next year's leadership.  If you are attending UTC TELECOM 2012 it is critical that you participate in this membership meeting.  Even if you aren't yet a member of UTC, you're invited to hear what UTC has planned for the upcoming year.

9:30 a.m. – 12:00 p.m.
Committee Meetings

12:00 p.m.
UTC TELECOM 2012 Adjourns

12:00 p.m. - on
Post Conference User Group Meetings