Tom Alrich's Blog

In my most recent post I stated that I thought cloud storage of BES Cyber System Information was permitted by NERC CIP v5 and v6, and qu...

At the beginning of January, I wrote a post stating that entities that utilize the cloud to store BES Cyber System Information are on sh...

Are you attending the RSA Security Conference in San Francisco next week (i.e. the week of Feb. 13)? Deloitte will have a large booth (no...

In the fall of 2014, I wrote a series of posts entitled “Roll Your Own”. [i] I wrote them because I had been despairing earlier that ye...

I have been saying for a year that the NERC CIP standards, in their current prescriptive format, are unsustainable. Until my last post ...

Since at least last February , I have been pushing the idea that the CIP standards are on an unsustainable course and need to be radicall...