But increasingly that’s no longer the case, as companies install more sophisticated monitoring and diagnostics software that help them operate these systems more efficiently.
“Now these systems are all interconnected in ways that the companies themselves don’t always fully understand,” said Marty Edwards, vice president of operational technology for Tenable, a cybersecurity firm.
“Companies don’t always release a lot of information publicly” about the threats they’re seeing, said Padraic O’Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cybersecurity.
“Part of it is the sheer complexity of the grid,” said Reid Sawyer, managing director of the United States cyberconsulting practice at Marsh, an insurance firm.
Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cybersecurity practices.
don’t, ”, Marty Edwards, Padraic O’Reilly, Reid Sawyer
CyberSaint, Analysts, United
United States, Marsh