90
1 Information Weapon: Concepts, Means, Methods …
American experts tend to observe high and constantly enhancing proficiency of
the attackers in cyberdomain, who apply the advanced test computer technologies,
software and hardware tools, methods and techniques. Setting up to implementation
of cyberattacks may take rather long time and continue for many months.
Cybersecurity of energy industry in the USA infrastructure is assured within the
frameworks of National Cyberspace Security Response System. The key federal
agencies responsible for cybersecurity of energy industry and infrastructure are as
follows:
– Coordination councils of energy subsector of Department of Homeland Security
(Electricity Subsector Coordinating Council) and oil and gas infrastructure (Oil
and Natural Gas Subsector Coordinating Council);
– Center of cybersecurity and communications of Department of Homeland Security
(National Cybersecurity and Communications Integration Center), which incorporates: National Cybersecurity Division; US Computer Emergency Readiness
Team; Industrial Control System Cyberemergency Response Team;
– Industry Information Sharing and Analysis Center of Department of Homeland
Security, incorporated into unified national system of cybersecurity assurance:
Office of Cybersecurity, Energy Security and Emergency Response at Department
of Energy;
– Office of Electricity and Energy Reliability at Department of Energy.
Department of Energy in tandem with Department of Homeland Security have
created Integrated Joint Cybersecurity Coordination Center—iJC3 for monitoring
and analysis of cyberthreats in cooperation with national laboratories at Department of Energy and also for notifying them in automatic mode. The said Center
is coordinating prevention and detection of attacks, countermeasures, restoration of
information networks after attacks, and remedial activities in conjunction intelligence community of the USA. One of the services provided by iJC3 is cyberintelligence on basis of cyberfederated model (CFM) which ensures automated machineto-machine intelligence data communication about cyberthreats for notifying and
taking protection measures in due time manner.
Conceptual approaches and activities plans to assure cybersecurity of energy
sector of the USA are defined in the following basic documents:
– National Cyberstrategy of the USA, 2018;
– National Infrastructure Protection Plan, Department of Domestic Security,2013
with Appendix dedicated to protection of energy industry facilities of Department
of Energy of the USA, 2015 (Energy Sector-Specific Plan, 2015);
– NIST Cybersecurity Framework, 2014;
– US Department of Energy Cybersecurity Strategy 2018–2020;
– The Department of Energy’s Unclassified Cybersecuity Program, 2017;
– Roadmap to Achieve Energy Delivery Systems Cybersecurity3, Department of
Energy of the USA;
– EO 13636, Improving Critical Infrastructure Cybersecurity, 2013;
– PPD 21, Critical Infrastructure Security and Resilience, 2013;
1 Information Weapon: Concepts, Means, Methods …
American experts tend to observe high and constantly enhancing proficiency of
the attackers in cyberdomain, who apply the advanced test computer technologies,
software and hardware tools, methods and techniques. Setting up to implementation
of cyberattacks may take rather long time and continue for many months.
Cybersecurity of energy industry in the USA infrastructure is assured within the
frameworks of National Cyberspace Security Response System. The key federal
agencies responsible for cybersecurity of energy industry and infrastructure are as
follows:
– Coordination councils of energy subsector of Department of Homeland Security
(Electricity Subsector Coordinating Council) and oil and gas infrastructure (Oil
and Natural Gas Subsector Coordinating Council);
– Center of cybersecurity and communications of Department of Homeland Security
(National Cybersecurity and Communications Integration Center), which incorporates: National Cybersecurity Division; US Computer Emergency Readiness
Team; Industrial Control System Cyberemergency Response Team;
– Industry Information Sharing and Analysis Center of Department of Homeland
Security, incorporated into unified national system of cybersecurity assurance:
Office of Cybersecurity, Energy Security and Emergency Response at Department
of Energy;
– Office of Electricity and Energy Reliability at Department of Energy.
Department of Energy in tandem with Department of Homeland Security have
created Integrated Joint Cybersecurity Coordination Center—iJC3 for monitoring
and analysis of cyberthreats in cooperation with national laboratories at Department of Energy and also for notifying them in automatic mode. The said Center
is coordinating prevention and detection of attacks, countermeasures, restoration of
information networks after attacks, and remedial activities in conjunction intelligence community of the USA. One of the services provided by iJC3 is cyberintelligence on basis of cyberfederated model (CFM) which ensures automated machineto-machine intelligence data communication about cyberthreats for notifying and
taking protection measures in due time manner.
Conceptual approaches and activities plans to assure cybersecurity of energy
sector of the USA are defined in the following basic documents:
– National Cyberstrategy of the USA, 2018;
– National Infrastructure Protection Plan, Department of Domestic Security,2013
with Appendix dedicated to protection of energy industry facilities of Department
of Energy of the USA, 2015 (Energy Sector-Specific Plan, 2015);
– NIST Cybersecurity Framework, 2014;
– US Department of Energy Cybersecurity Strategy 2018–2020;
– The Department of Energy’s Unclassified Cybersecuity Program, 2017;
– Roadmap to Achieve Energy Delivery Systems Cybersecurity3, Department of
Energy of the USA;
– EO 13636, Improving Critical Infrastructure Cybersecurity, 2013;
– PPD 21, Critical Infrastructure Security and Resilience, 2013;