Description

A two-day course to provide instruction on a range of security technologies and practices impacting the Utility industry, including: impending NERC and IEEE guidelines and standards for infrastructure protection, nature of Utility security threats, current IT security practices and configuration of the Orion Automation Platform security features. Laboratory exercises will complement the lecture material, allowing each student to build a secure Orion front end.

Prerequisites

Experience or training in the use of the Orion Automation Platform. Some knowledge of and experience with security hardware and software desirable.

Topic Outline

• Review of NERC CIP Guidelines, including latest Version 5 requirements • Nature of Security Threats to the Critical Utility Infrastructure • Remote Authentication Theory and Practice • Firewall Theory and Practice • VPN and Encryption Theory and Practice • Public Key Cryptography Theory and Practice • Security Log Files Review • Laboratory Exercise: Configuration of Orion Security Features, including:

• Setting Passwords for Multiple User Groups with Varying Privileges
• Defining Password Strength
• Configuring Orion to Client to Remote RADIUS and LDAP Authentication Servers
• Configuring Firewall Rules
• Configuring VPN and Encryption Protocols
• Managing Public and Private Keys
• Viewing and Sorting Logs
• Transferring Secure Configurations