Tom Alrich's Blog

I attended WECC’s CIPUG – CIP User Group – in Anaheim, Calif. last week.  This was the third CIPUG I’ve attended in this location, at a h...

A recent post described – at a very high level – my “methodology” [i] for complying with CIP-002-5.1 R1 (which I usually refer to simpl...

There is a discussion going on in NERC circles about whether networking devices should be declared BES Cyber Assets or not.  At first gla...

Last year, I wrote two posts ( here  and  here ) about what I see as a great sport engaged in by many in the press (and the consultants who...