
<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>LIGHTS</title>
	<atom:link href="http://lights.energysec.org/feed/" rel="self" type="application/rss+xml" />
	<link>http://lights.energysec.org</link>
	<description>Critical Support for National Cybersecurity</description>
	<lastBuildDate>Thu, 15 Nov 2012 14:53:03 +0000</lastBuildDate>
	<language></language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>Information Sharing and the ICS-ISAC</title>
		<link>http://lights.energysec.org/information-sharing-and-the-ics-isac/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=information-sharing-and-the-ics-isac</link>
		<comments>http://lights.energysec.org/information-sharing-and-the-ics-isac/#comments</comments>
		<pubDate>Sun, 15 Apr 2012 16:00:19 +0000</pubDate>
		<dc:creator>Chris Blask</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://lights.energysec.org/?p=3908</guid>
		<description><![CDATA[The topic of information sharing has become one of the most interesting in the process of ferreting out &#8220;The Solution&#8221; to ICS cybersecurity. Aspects of the effort to secure industrial control systems  &#8211; including timing, technology and workforce – lend themselves to suggest that answers lie less in technology and more in Robert’s Rules. There is much wailing and gnashing of teeth among the Information Sharing crowd. Over the past decade valiant efforts have been met with what might not always look like success. The federal government has loomed over the conversation, the brave and the timid from the private sector either strode forth or crabbed hesitantly towards the shadow of the leviathan. It is not uncommon to hear subject matter experts ask why more isn’t being done, these days. Particularly among the war-weary who have witnessed works like the “Fall of the House of Food ISAC”. Information sharing efforts to date have certainly not exceeded their highest expectations. But rather than being a matter of a failure of any particular party, it is more that the initial expectations might not have fully encircled the scope of the issue. Both on the federal government side as well as the private sector worthy efforts have been undertaken that themselves were about as much as could be done up to this point. Bob Radvanovsky partnered with Lofty Perch and started the SCADASEC forum. The Department of Homeland Security stood up ICS-CERT.  These and efforts like them have both provided a medium for communication ...]]></description>
		<wfw:commentRss>http://lights.energysec.org/information-sharing-and-the-ics-isac/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Webinar April 24, 10am PT: Addressing Cybersecurity for Smaller Facilities</title>
		<link>http://lights.energysec.org/webinar-april-24-10am-pt-addressing-cyberbsecurity-for-smaller-facilities/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=webinar-april-24-10am-pt-addressing-cyberbsecurity-for-smaller-facilities</link>
		<comments>http://lights.energysec.org/webinar-april-24-10am-pt-addressing-cyberbsecurity-for-smaller-facilities/#comments</comments>
		<pubDate>Fri, 23 Mar 2012 23:06:46 +0000</pubDate>
		<dc:creator>Chris Blask</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://lights.energysec.org/?p=3843</guid>
		<description><![CDATA[Join representatives of industry organizations APPA, NRECA and AWWA representing tens of thousands of smaller water and power utilities in this roundtable discussion of the challenges faced by smaller utilities, and how the LIGHTS program may provide viable, executable solutions within existing operating budgets. Tuesday, April 24, 2012 10:00 AM &#8211; 11:00 AM PST Click here to register The LIGHTS program is a private-private partnership which leverages the best aspects of the for-profit, competitive arena and the non-profit collaborative space to promote cybersecurity situational awareness across critical infrastructure industries. The goal of LIGHTS is to increase visibility into infrastructure threats and attacks by making security monitoring ubiquitous, and enabling wide-area analysis across geographic areas, and industry verticals. After a short LIGHTS presentation by Chris Blask, Energysec&#8217;s Steve Parker will moderate a discussion with Mr. Blask, Founder and CEO of ICS Cybersecurity, Kevin Morley, Chief Security Officer for the American Waterworks Association, Craig Miller from the National Rural Electric Corporation, Nathan Mitchell from American Public Power, Joel Langill, SCADAhacker and Mike Menefee, CEO of Trusted Metrics. About the presenters: Chris Blask, CEO and Founder, ICS Cybersecurity Inc.. LIGHTS Advisory Board Chair Mr. Blask’s career covers the breadth of the ICS cybersecurity space. In 1990 he worked at General Electric Power Systems as a control systems engineer where he conceived, designed and implemented a facility-wide mobile video conferencing capability to integrate with GE’s new global video conferencing network. He joined Sea Change Corporation in 1991 where he invented one of the first commercial firewall products, ...]]></description>
		<wfw:commentRss>http://lights.energysec.org/webinar-april-24-10am-pt-addressing-cyberbsecurity-for-smaller-facilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A Brief History of LIGHTS</title>
		<link>http://lights.energysec.org/a-brief-history-of-lights/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=a-brief-history-of-lights</link>
		<comments>http://lights.energysec.org/a-brief-history-of-lights/#comments</comments>
		<pubDate>Sat, 17 Mar 2012 02:06:11 +0000</pubDate>
		<dc:creator>Chris Blask</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://lights.energysec.org/?p=3832</guid>
		<description><![CDATA[(This piece was published in various Linkedin Groups in March, 2012.) LIGHTS &#8211; A Non-Profit Program for Small Facility Control System Cybersecurity A program called LIGHTS has been brewing among a group of industry people. It started with an idea and, as such things go, has gotten all grown up and now has a life of its own. The idea started with the fact that &#8211; while the majority of critical infrastructure consists of small organizations &#8211; the majority of effort expended on the topic is focused on the few very large ones. Further, the idea went, securing small facilities with available open source tools could provide a dramatic improvement with moderate effort and little cost. Even further, the idea indulged itself, with a programmatic approach the process becomes repeatable with less effort, and making a habit of that sort of thing could make a significant dent in the problem. The idea then took itself entirely too seriously &#8211; as energetic young ideas are prone to do &#8211; and went so far as to propose that MSSPs could manage these deployments safely and cheaply. On a roll now, the idea said that these MSSPs would act as effective hubs for appropriate information sharing: keeping lots of small facilities to-the-minute updated from the various analysis centers popping up everywhere. Finishing with a bang, the idea suggested that these facilities could be given the option to share anonymized metadata with some or all of these analysis centers, improving the security of their ...]]></description>
		<wfw:commentRss>http://lights.energysec.org/a-brief-history-of-lights/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Federal Cybersecurity Legislation</title>
		<link>http://lights.energysec.org/federal-cybersecurity-legislation/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=federal-cybersecurity-legislation</link>
		<comments>http://lights.energysec.org/federal-cybersecurity-legislation/#comments</comments>
		<pubDate>Fri, 02 Mar 2012 23:45:11 +0000</pubDate>
		<dc:creator>Chris Blask</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://lights.energysec.org/?p=3614</guid>
		<description><![CDATA[Two competing bills in Congress give possible indications of government policy direction. In recent weeks Senator Joseph Lieberman (I-Connecticut) introduced the Cybersecurity Act of 2012, while Senator John McCain (R-Arizona) introduced the Strengthening and Enhancing Cybersecurity by Using Research, Education, Information, and Technology Act of 2012 (SECURE IT).]]></description>
		<wfw:commentRss>http://lights.energysec.org/federal-cybersecurity-legislation/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Electric Sector Cyber Security Risk Management Model Initiative (ESCRMMI)</title>
		<link>http://lights.energysec.org/electric-sector-cyber-security-risk-management-model-initiative-escrmmi/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=electric-sector-cyber-security-risk-management-model-initiative-escrmmi</link>
		<comments>http://lights.energysec.org/electric-sector-cyber-security-risk-management-model-initiative-escrmmi/#comments</comments>
		<pubDate>Fri, 02 Mar 2012 23:42:48 +0000</pubDate>
		<dc:creator>Chris Blask</dc:creator>
				<category><![CDATA[Electric]]></category>
		<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://lights.energysec.org/?p=3608</guid>
		<description><![CDATA[The Department of Energy, Office of Energy announced on January 5, 2012 an initiative to produce and exercise a maturity model for cybersecurity at electric utilities. This effort is in association with the White House, which published a statement on the topic on January 9, and the Department of Homeland Security. Today the second draft of the Electricity Subsector Risk Management Process was released for public comment as part of this effort. Comments are due before Thursday April 5, 2012 and can be submitted using this form.]]></description>
		<wfw:commentRss>http://lights.energysec.org/electric-sector-cyber-security-risk-management-model-initiative-escrmmi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>From Raffael Marty &#8211; The Steps To a Mature Visual Analytics Practice</title>
		<link>http://lights.energysec.org/from-raffael-marty-the-steps-to-a-mature-visual-analytics-practice/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=from-raffael-marty-the-steps-to-a-mature-visual-analytics-practice</link>
		<comments>http://lights.energysec.org/from-raffael-marty-the-steps-to-a-mature-visual-analytics-practice/#comments</comments>
		<pubDate>Wed, 29 Feb 2012 02:23:51 +0000</pubDate>
		<dc:creator>Stacy Bresler</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://lights.energysec.org/?p=3479</guid>
		<description><![CDATA[Although this is a bit dated, it is worth a read through. I particularly like these two paragraphs (read the whole blog though): &#160; Read the entire blog post here. &#160;]]></description>
		<wfw:commentRss>http://lights.energysec.org/from-raffael-marty-the-steps-to-a-mature-visual-analytics-practice/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
