Once you have identified all the weaknesses and vulnerabilities in a site’s physical protection system, how do you know which ones should be fixed first, and second, and third, etc.?…
I came across an interesting tool a while ago. Called the ‘Eisenhower Matrix,’ it builds upon the comment that the 34 President of the USA said in a speech in…
I spent this past week in Quebec City. I was there for GridSecCon 2023, the electricity sector’s annual security conference, where I met a lot of old friends and made…
This is the first of what I hope is many joint blog posts with my friend and colleague, John McClean, Director, Util-Assist Inc. John and I have worked together for…
From my book, Antiterrorism and Threat Response, Planning and Implementation, there are five fundamentals to antiterrorism planning: 1 Threat vulnerability assessment. This is a realistic assessment based on the actual…
An “insider” refers to a current or former employee, contractor, or business partner who has or had authorized access to an organization’s network, system, data, or facilities. They may misuse…
Electric sector assets were, for the most part, built a long time ago. A couple of facts to illustrate: The past forty years have seen huge changes in technology, climate,…
In the late 90’s I took (and later helped to teach) a course in Fort Huachuca, Arizona, called “Intelligence in Combating Terrorism.” The instructor was Bill Jordan, and to him,…
If you want to stop criminals from damaging your assets, there is only one formula for success. You have to detect the intruders as early as possible, assess their activity…
