SLIDE 1
Goals for today
Raise awareness
Welcome to Tech & Security Symposium – 2
Welcome to WAPAs Technology and Security Symposium Mark A. Gabriel - - PowerPoint PPT Presentation
Welcome to WAPAs Technology and Security Symposium Mark A. Gabriel - - PowerPoint PPT Presentation
Welcome to WAPAs Technology and Security Symposium Mark A. Gabriel Administrator and CEO August 21, 2018 Goals for today Raise awareness Share leading practices Welcome to Tech & Security Symposium 2 Risks and costs Risk =
SLIDE 2
SLIDE 3
Welcome to Tech & Security Symposium – 3
Risks and costs Risk = Threats x Vulnerabilities x Impact Cost
SLIDE 4
Lowering WAPA’s risk profile
- Utility operating under
federal government
- Compliance with NERC
standards
- Knowledge is power
- Data-driven decisions,
investments
Welcome to Tech & Security Symposium – 4
SLIDE 5
Wake-up call
Welcome to Tech & Security Symposium – 5
SLIDE 6
Key issues
- Asset management
- Physical security
- Cybersecurity
Welcome to Tech & Security Symposium – 6
SLIDE 7
- $4.3 billion in assets
- 177,000 structures
- 17,360 miles of
transmission line
- 316 substations
- 288 transformers
- 659 buildings
- 482 communication sites
Welcome to Tech & Security Symposium – 7
What we manage
SLIDE 8
Security evolution
WAPA-wide
Welcome to Tech & Security Symposium – 8
SLIDE 9
Welcome to Tech & Security Symposium – 9
- Continue to improve
security posture
- Completed all substation
assessments completed FY 2017
- 75 second-round
assessments to be completed in 2018
- 37 complete as of Q3
Physical security
SLIDE 10
Welcome to Tech & Security Symposium – 10
80 incidents from 2014 – present
Physical security incidents
SLIDE 11
Welcome to Tech & Security Symposium – 11
- Secure Enclave Systems control
- Regular scanning
- Logging events
- Alerting, patching, updating
- Partnership with DOE
Cybersecurity
SLIDE 12
Welcome to Tech & Security Symposium – 12
WAPA defended against 61,658,926 blocks
- n its firewall
(July 2017 – May 2018)
Cyber attacks
Source (country/region) # firewall blocks United States 4,282,627 China 15,176 United Kingdom 8,191 France 7,934 Chechnya 5,430 Germany 2,699 Brazil 2,419 Russia 2,072 Indonesia 1,907 Seychelles 1,800 July 2018
SLIDE 13
- Critical Infrastructure
Protections v5
- 40,000+ hours investment
- Network Access Control
- Secure Enclave Systems
Control (substations)
- Avoid spending $6.5M
- ver 5 years
- WAPA-wide solution
Welcome to Tech & Security Symposium – 13
WAPA response
SLIDE 14
Welcome to Tech & Security Symposium – 14
- Improving reliability
through lifecycle management
- Federal overlay
- Audit load
- Increasing cyber threats
- Supply chain risk
management
Maturing IT program
SLIDE 15
$- $5 $10 $15 $20 $25 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027
HQ 10-Year Capital Plan by Organization
FY18-27 estimates as of September 2017
A2100 - Cyber Security A2200 - Network A2600 - Infrastructure A2700 - SCADA A2800 - Enterprise Applications A2900 - Power Management & Marketing A2A00 - O&M Technology A7810 - Aviation Prior Year
Welcome to Tech & Security Symposium – 15
Technology capital investments
SLIDE 16
Welcome to Tech & Security Symposium – 16
Value in all we do
SLIDE 17
Welcome to Tech & Security Symposium – 17
Value in all we do
SLIDE 18
- Secure, confidential, rapid
- Actionable
- Indemnify
- Cyber happens in
milliseconds and is not regional
Welcome to Tech & Security Symposium – 18
Information sharing is critical
SLIDE 19
Welcome to Tech & Security Symposium – 19
Key takeaway
SLIDE 20
Welcome to Tech & Security Symposium – 20
Mark A. Gabriel
720.962.7705 gabriel@wapa.gov
wapa.gov @westernareapowr @MarkAGabriel Mark Gabriel WesternAreaPower1