Part 5 - Ctrl+Alt+Comply: Cloud Services and CIP Standards – What are the current compliance challenges?
The presentation will discuss and highlight the specific compliance issues and considerations to address when evaluating whether to use the cloud for various aspects of electric grid operations. During the presentation, the speaker will address specific NERC CIP Compliance, Rule of Procedure or Operation & Planning regulations that impact the asset owner's cloud infrastructure options.
Speakers:
About our guest speaker:
Tobias Whitney has been a leading voice in the electric power industry, specializing in cybersecurity, regulatory compliance, and cloud operations for over 25 years. His work has significantly shaped the standards and practices that protect the security and resilience of the electric grid. Tobias' contributions include pioneering cybersecurity policies at NERC and EPRI, where he helped create critical guidelines that enable utilities to meet North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) standards, fortifying the industry against evolving cyber threats. In the realm of cloud and grid security, Tobias has advanced best practices that enable the energy sector to leverage modern technologies while maintaining regulatory compliance. His innovative work has bridged the gap between operational technology (OT) and information technology (IT), creating secure pathways for the integration of cloud services in this highly regulated field. As a respected industry leader, Tobias has been involved in the development of key standards related to supply chain security and distributed energy resource (DER) management, influencing how the industry addresses risks tied to third-party vendors and new technologies. Known for his thought leadership, he frequently publishes insights and contributes to discussions on cybersecurity and regulatory issues, advocating for adaptive cloud policies that support industry innovation. In his latest endeavor, Tobias founded Cumulys, a compliance intelligence platform that enhances information sharing and operations between asset owners and suppliers. Cumulys embodies Tobias' commitment to leveraging advanced technology, including artificial intelligence, to help utilities navigate compliance challenges and foster growth within the industry.
This webcast is part 5 of a 6-part NERC CIP in the Cloud series. Register and watch all parts in the series:
- Part 1 - Ctrl+Alt+Comply: NERC CIP in the Cloud - Introduction and Current State
- Part 2 - Ctrl+Alt+Comply: NERC CIP in the Cloud - Regulated Electric Utility Perspective
- Part 3 - Ctrl+Alt+Comply: Application Provider Perspective
- Part 4 - Ctrl+Alt+Comply: Cloud Services and CIP Standards - Cloud Service Providers (CSPs) Perspective
- Part 6 - Ctrl+Alt+Comply: Cloud Services and CIP Standards – The Path Forward
