Burns & McDonnell was contracted to perform a readiness assessment of the current state of the supervisory control and data acquisition (SCADA) and distributed control system (DCS) with respect to the North American Electric Reliability Corp. Critical Infrastructure Protection (NERC CIP) standards (CIP-002 through CIP-009). While these facilities were not identified as critical cyber assets by Burbank Water and Power, the assessment was performed to identify possible areas of noncompliance for other critical assets. For the purposes of this assessment, the facilities were treated as critical assets, subject to all NERC CIP standards.
Burns & McDonnell assessed the state-of-the-art Burbank Water and Power SCADA system, as well as the newly christened DCS for the Magnolia, Lake One, and Olive 1 and 2 plants. Burns & McDonnell identified critical cyber assets at the facilities, using this information to propose electronic and physical security perimeters, documenting controls in place to secure these perimeters and possible methods of securing the perimeters according to NERC CIP standards.
In addition to identifying the perimeters, findings of noncompliance were recorded along with recommendations for remediation and a classification of risk.
As a recipient of a Department of Energy (DOE) Smart Grid grant, Burns & McDonnell also performed a strategic assessment for the development of the cyber security plan required by the DOE. Additionally, performing the analysis and development to meet NERC CIP/National Institute of Standards and Technology (NIST) regulatory requirements.