Cigital has released the Guide to Developing a Cyber Security and Risk Mitigation Plan. Cigital, a provider of software security services has partnered with the National Rural Electric Cooperative Association (NRECA) to develop this guide.

The newly released guide comprises practical tools, a risk mitigation checklist, and step-by-step template to help utilities create a cyber security and risk mitigation plan.

It is comprised of a suite of documents built upon guidance in NIST IR 7628, NERC (News - Alert) CIP, as well as other industry resources and standards. Cigital notes that this guide is also based on its cyber security risk management experience gained through 20 years of security consulting and research.

“We are excited to partner with NRECA to create the cyber security guide and planning tools that will help electric utilities build an internal risk management program and embark on a path of continuous improvement to systematically reduce their exposures to current and emerging cyber security risks,” said Evgeny Lebanidze, a managing consultant at Cigital and a cyber-security team lead on NRECA’s Smart Grid demonstrations project.

“We can’t thank Cigital enough for its work on the guide by providing a practical plan for getting started in grid cyber security,” said Craig Miller, NRECA. “The best part is the plan can grow and improve over time, driving continuous improvement and adaptation to changing conditions and technology. This is the only practical way to tackle the problem – do the best you can do now, and then get better month-by-month and year-by-year.”

According to a release, 23 cooperatives participating in NRECA’s smart grid demonstration project are already using the guide.

It is expected that n cooperatives across the country will use the guide, checklist and plan template. NRECA has received requests for the guide from utilities in the U.S., England, India and Italy.