Tom Alrich's Blog

I’ve been saying for a while that the biggest flaw in CIP-013 is that it doesn’t provide a list of risks (or threats, as I prefer to c...

If you’re attending the RSA Security Conference 2019 in San Francisco in 3 weeks, I want to remind you that I’ll be participating in a ...

Imagine what might happen if the following news was announced: “The Ukraine State Intelligence Service stated in its just-released W...

Yesterday’s online Wall Street Journal carried a very good article by Rebecca Smith, titled “ Duke Energy Broke Rules Designed to Keep...

I think a lot of my readers will already know this, but if you don’t – NERC just announced the largest-ever CIP fine, which adds anothe...

This is a post I’ve been intending to write ever since I wrote this post a few weeks ago, about the Wall Street Journal ’s most recent...

Lew Folkerth of RF published an article about CIP-013 in December in the RF newsletter, which I wrote about in this post and in this o...