Identity and Access Management for Electric Utilities NIST SP 1800-2a + 2b

FINAL Released 10 July 2018
Printed in COLOR

ePub version also available for use on Kindle, iPad, Android tablet, and iPhone.

The electric power industry is upgrading older, outdated infrastructure to take advantage of emerging technologies that will create "a platform that] efficiently integrates] new energy resources, new technologies, and new devices into the system." The ever-greater numbers of technologies, devices, and systems connected to utilities' grid networks need protection from physical and cybersecurity attacks.

To better protect power generation, transmission, and distribution, electric companies need to be able to control access to their networked resources, including buildings, equipment, information technology, and industrial control systems-all of which have unique technical and political challenges. Identity and access management (IdAM) systems for these assets often exist in silos, and employees who manage these systems lack methods to effectively coordinate access to devices and facilities in these silos. This can result in security risks for utilities.

Why buy a book you can download for free?

First you gotta find it and make sure it's the latest version, not always easy. Then you gotta print it using a network printer you share with 100 other people - and its outta paper - and the toner is low (take out the toner cartridge, shake it, then put it back). If it's just 10 pages, no problem, but if it's a 250-page book, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. An engineer that's paid $75 an hour has to do this himself (who has assistant's anymore?).

If you are paid more than $10 an hour and use an ink jet printer, buying this book will save you money.

It's much more cost-effective to just order the latest version from Amazon.com

This public domain material is published by 4th Watch Books. We publish tightly-bound, full-size books at 8 1/2 by 11 inches, with glossy covers. 4th Watch Books is a Service Disabled Veteran Owned Small Business (SDVOSB) and is not affiliated with the National Institute of Standards and Technology.

For more titles published by 4th Watch, please visit: www.usgovpub.com

A full copy of all the pertinent cybersecurity standards is available on DVD-ROM in the CyberSecurity Standards Library disc which is available at Amazon.com.

GSA P-100Facilities Standards for the Public Buildings Service

GSA P-120 Cost and Schedule Management Policy Requirements

GSA P-140 Child Care Center Design Guide

GSA Standard Level Features and Finishes for U.S. Courts Facilities

GSA Courtroom Technology Manual

NIST SP 500-299NIST Cloud Computing Security Reference Architecture

NIST SP 500-291NIST Cloud Computing Standards Roadmap Version 2

NIST SP 500-293US Government Cloud Computing Technology Roadmap Volume 1 & 2

NIST SP 500-293US Government Cloud Computing Technology Roadmap Volume 3 DRAFT

NIST SP 1800-8Securing Wireless Infusion Pumps

NISTIR 7497Security Architecture Design Process for Health Information Exchanges (HIEs)

NIST SP 800-66Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule

NIST SP 1800-1 Securing Electronic Health Records on Mobile Devices

NIST SP 800-177 Trustworthy Email

NIST SP 800-184 Guide for Cybersecurity Event Recovery

NIST SP 800-190 Application Container Security Guide

NIST SP 800-193 Platform Firmware Resiliency Guidelines

NIST SP 1800-1

NIST SP 1800-5

NIST SP 1800-6