DirectConnect | Podcast en RSS.com

DirectConnect

por DirectConnect

Gobierno Tecnología

Temporada 5

New Executive Order: What Utilities Need to Know About Securing the U.S. Power Grid

A newly issued Executive Order declaring a national emergency to secure the United States Bulk Power System could have significant implications for utilities, equipment vendors, and organizations operating across the energy sector. In this episode of DirectConnect, Archer Managing Partners Brian Pauling and Brent Castagnetto, along with Account Manager John Fallon, discuss the potential challenges and unanswered questions surrounding the order. The conversation explores: • How the expanded definition of Bulk Power System equipment could affect utilities • The potential impact on inverter-based resources and renewable generation • Why identifying and inventorying potentially affected equipment may be a critical first step • The challenges surrounding vendor qualification and potential pre-approved equipment lists • Supply chain concerns involving transformers and other critical infrastructure • Gaps between existing regulations and emerging security risks • What utilities can do now to begin assessing their potential exposure While many details will need to be clarified as the industry responds, one message is clear: the risk is real, and organizations should begin understanding how these changes could impact their operations. Watch now for Archer's initial perspective on what this Executive Order could mean for the security and resilience of the U.S. power grid. About Archer Energy Solutions Archer helps critical infrastructure organizations manage security risk across cyber, physical, and operational environments. We work with utilities, energy providers, and other essential sectors to strengthen resilience, improve visibility, and stay aligned with evolving regulatory and compliance requirements — including NERC CIP and other industry standards. Our focus is practical, real-world security risk management: • Cybersecurity for IT & OT environments • Physical security strategy and integration • Compliance and audit readiness • Risk assessment and program development • Bridging the gap between operations, security, and leadership Because protecting infrastructure isn’t just about technology — it’s about people, processes, and preparedness. Archer — Managing Tomorrow’s Risks, Today! 📩 Connect with our team to continue the conversation: 🌐 Website: www.archerint.com 📧 Email: contact@archerint.com 🔗 LinkedIn: https://www.linkedin.com/company/archer-energy-solutions-llc 🔗 Facebook: https://www.facebook.com/ArcherInternational #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resilience #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions

NERC’s New Large Load Rules: What Data Centers Need to Know Now

The electric grid is changing—and large loads, especially data centers and other computational loads, are becoming a major reliability concern. In this episode of DirectConnect, Steve Parker, Brian Pauling, and John Fallon break down the rapidly developing regulatory landscape surrounding large loads and what it could mean for utilities, data centers, and other organizations connecting to the bulk electric system. Following recent FERC action directing NERC to develop new or modified reliability standards, organizations that may not have considered themselves part of the NERC compliance world could soon find themselves facing new requirements. The conversation explores: What qualifies as a “large load” and why the definition matters Why computational loads and data centers are receiving increased attention What FERC has directed NERC to do How new requirements could affect existing and planned data centers Why organizations should begin with a gap analysis and assessment The potential impact on modeling, studies, instrumentation, protection, and controls Why physical security and cybersecurity could become increasingly important How utilities may need to rethink interconnection requirements What the future could hold for NERC reliability standards and large computational loads Why organizations should start preparing now rather than waiting for the final requirements As Brian points out, many organizations are now having to reconsider where they fit into the evolving NERC framework—and how their loads could affect bulk electric system reliability. The message is simple: If you haven't started looking at this, now is the time. Whether you're a utility, transmission owner, balancing authority, data-center operator, or another organization dealing with large or computational loads, understanding where these requirements are heading can help you prepare before they become an immediate compliance challenge. Direct Connect with Archer brings industry experts together to discuss the issues shaping cybersecurity, physical security, compliance, and reliability across critical infrastructure. #NERC #FERC #DataCenters #LargeLoads #GridReliability #NERCCompliance #Cybersecurity #CriticalInfrastructure #EnergySecurity #ArcherEnergySolutions

Buying More Tools Does Not Necessarily Make You More Secure

Every year, organizations invest thousands—or even millions—of dollars in new cybersecurity tools with the expectation that they'll automatically improve security and compliance. Unfortunately, that's rarely how it works. In this episode of DirectConnect, the Archer managing partners, Leonard Chamberlin, Stacy Bresler, Brent Castagnetto, and Steve Parker, discuss one of the most common mistakes they see across the utility and critical infrastructure industries: believing that buying more security products will solve security and compliance challenges. They explore: Why cybersecurity tools are not a silver bullet The hidden costs of tool sprawl and overlapping solutions How poor planning leads to shelf-ware, alert fatigue, and misconfigured systems Why people, processes, and governance matter more than technology alone What organizations should evaluate before purchasing a new security solution How to become an "active buyer" instead of simply accepting vendor recommendations Best practices for reducing risk while maximizing your existing technology investments Whether you're responsible for NERC CIP compliance, OT security, IT security, or enterprise risk management, this conversation offers practical advice for making smarter security investments that actually improve your organization's security posture.

Are We More Secure Or Just More Compliant?

In this episode of Direct Connect, Stacy Bresler, Steve Parker, and John Fallon tackle one of the most misunderstood topics in modern cybersecurity: Does compliance actually make you secure? Organizations invest millions in cybersecurity programs, tools, audits, and regulatory requirements—yet breaches continue to happen. Why? They explore the growing disconnect between security risk and compliance risk, discussing how organizations can achieve perfect audit scores while still maintaining significant cybersecurity vulnerabilities. They also examine how regulatory frameworks, vendor marketing, executive reporting, and organizational silos contribute to a false sense of security. Compliance and security are not the same thing—but they must work together. Organizations that treat them as separate initiatives often create inefficiencies, duplicate efforts, and expose themselves to unnecessary risk. True resilience comes from aligning security objectives, compliance obligations, and executive decision-making. -----About Archer Energy Solutions----- Archer helps critical infrastructure organizations manage security risk across cyber, physical, and operational environments. We work with utilities, energy providers, and other essential sectors to strengthen resilience, improve visibility, and stay aligned with evolving regulatory and compliance requirements — including NERC CIP and other industry standards. Our focus is practical, real-world security risk management: • Cybersecurity for IT & OT environments • Physical security strategy and integration • Compliance and audit readiness • Risk assessment and program development • Bridging the gap between operations, security, and leadership Because protecting infrastructure isn’t just about technology — it’s about people, processes, and preparedness. Archer — Managing Tomorrow’s Risks, Today! 📩 Connect with our team to continue the conversation: 🌐 Website: www.archerint.com 📧 Email: contact@archerint.com 🔗 LinkedIn: https://www.linkedin.com/company/archer-energy-solutions-llc 🔗 Facebook: https://www.facebook.com/ArcherInternational #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resilience #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions

Extreme Weather Conditions

In this episode of Direct Connect, Brian Pauling, Brent Castagnetto and John Fallon, discuss the growing impact of extreme weather conditions on utility operations and critical infrastructure resilience. From unexpected spring snowstorms in Colorado to extreme heat forecasts across the Southeast, the conversation explores how utilities can prepare for the challenges ahead. The discussion highlights why compliance and operational teams must work together to ensure utilities remain reliable and resilient during periods of extreme weather. As energy demand rises and weather patterns become more unpredictable, preparation is more important than ever. -----About Archer Energy Solutions----- Archer helps critical infrastructure organizations manage security risk across cyber, physical, and operational environments. We work with utilities, energy providers, and other essential sectors to strengthen resilience, improve visibility, and stay aligned with evolving regulatory and compliance requirements — including NERC CIP and other industry standards. Our focus is practical, real-world security risk management: • Cybersecurity for IT & OT environments • Physical security strategy and integration • Compliance and audit readiness • Risk assessment and program development • Bridging the gap between operations, security, and leadership Because protecting infrastructure isn’t just about technology — it’s about people, processes, and preparedness. Archer — Managing Tomorrow’s Risks, Today! 📩 Connect with our team to continue the conversation: 🌐 Website: www.archerint.com 📧 Email: contact@archerint.com 🔗 LinkedIn: https://www.linkedin.com/company/archer-energy-solutions-llc 🔗 Facebook: https://www.facebook.com/ArcherInternational #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resilience #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions

Is Your Compliance Team Built to Last?

How much does your team size really impact your ability to stay compliant? In this episode of Direct Connect with Archer, Brian Pauling, Managing Partner at Archer and Archer's Account Manager John Fallon, dive into one of the most revealing questions they ask every client: “What’s your team size?” What seems like a simple question quickly uncovers deeper insights into risk, resilience, and compliance performance. From single-person teams to departments of 20+, they explore how team size influences: • Single points of failure and operational risk • The importance of documented procedures and processes • Communication challenges in both small and large teams • The balance between proactive and reactive compliance • The role of attitude, training, and team mentality Using real-world scenarios and relatable analogies, this conversation highlights a critical truth: success isn’t determined by team size—it’s driven by communication, preparation, and execution. Whether you're part of a lean compliance team or a large organization, this discussion will help you identify gaps, strengthen your approach, and improve your overall compliance posture. -----About Archer Energy Solutions----- Archer helps critical infrastructure organizations manage security risk across cyber, physical, and operational environments. We work with utilities, energy providers, and other essential sectors to strengthen resilience, improve visibility, and stay aligned with evolving regulatory and compliance requirements — including NERC CIP and other industry standards. Our focus is practical, real-world security risk management: • Cybersecurity for IT & OT environments • Physical security strategy and integration • Compliance and audit readiness • Risk assessment and program development • Bridging the gap between operations, security, and leadership Because protecting infrastructure isn’t just about technology — it’s about people, processes, and preparedness. Archer — Managing Tomorrow’s Risks, Today! 📩 Connect with our team to continue the conversation: 🌐 Website: www.archerint.com 📧 Email: contact@archerint.com 🔗 LinkedIn: https://www.linkedin.com/company/archer-energy-solutions-llc 🔗 Facebook: https://www.facebook.com/ArcherInternational #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resiliance #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions

Why Documentation of Processes & Procedures Matters (More Than You Think)

Why Documentation of Processes & Procedures Matters (More Than You Think) In this episode of DirectConnect, Steve Parker and Brian Pauling, Managing Partners at Archer, break down a topic that may not sound exciting at first—but is absolutely critical to operational success, compliance, and audit readiness: why documentation of processes and procedures matters. From NERC CIP and O&P requirements to real-world operational challenges, we explore how strong documentation ensures accuracy, consistency, timeliness, and defensibility across both cybersecurity and physical security environments. Whether you're a compliance manager, operator, engineer, or security leader, this conversation highlights why documentation isn't just paperwork—it’s operational resilience. -----About Archer Energy Solutions----- Archer helps critical infrastructure organizations manage security risk across cyber, physical, and operational environments. We work with utilities, energy providers, and other essential sectors to strengthen resilience, improve visibility, and stay aligned with evolving regulatory and compliance requirements — including NERC CIP and other industry standards. Our focus is practical, real-world security risk management: • Cybersecurity for IT & OT environments • Physical security strategy and integration • Compliance and audit readiness • Risk assessment and program development • Bridging the gap between operations, security, and leadership Because protecting infrastructure isn’t just about technology — it’s about people, processes, and preparedness. Archer — Managing Tomorrow’s Risks, Today! 📩 Connect with our team to continue the conversation: 🌐 Website: www.archerint.com 📧 Email: contact@archerint.com 🔗 LinkedIn: https://www.linkedin.com/company/archer-energy-solutions-llc 🔗 Facebook: https://www.facebook.com/ArcherInternational #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resilience #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions

What Cybersecurity Framework Should You Be Using?

What cybersecurity framework should your organization actually be using? In this episode of Direct Connect, Steve Parker and Stacy Bresler break down one of the most common—and most misunderstood—questions in cybersecurity: Which framework is right for you? From NIST CSF 2.0 to ISO 27001, IEC 62443, and even NERC CIP, they explore: Why sticking with your current framework might be the smartest move When (and how) to layer multiple frameworks together The difference between frameworks, control catalogs, and maturity models How to align cybersecurity with real-world operational needs in critical infrastructure Why governance should come first—before technology 💡 Key takeaway: There is no “one-size-fits-all” framework—but there is a smarter way to build a defensible, scalable security program. Whether you’re starting from scratch or refining an existing program, this conversation will help you cut through the noise and focus on what actually works. 📩 Need help building your cybersecurity framework? Contact Archer today. -----About Archer Energy Solutions----- Archer helps critical infrastructure organizations manage security risk across cyber, physical, and operational environments. We work with utilities, energy providers, and other essential sectors to strengthen resilience, improve visibility, and stay aligned with evolving regulatory and compliance requirements — including NERC CIP and other industry standards. Our focus is practical, real-world security risk management: • Cybersecurity for IT & OT environments • Physical security strategy and integration • Compliance and audit readiness • Risk assessment and program development • Bridging the gap between operations, security, and leadership Because protecting infrastructure isn’t just about technology — it’s about people, processes, and preparedness. Archer — Managing Tomorrow’s Risks, Today! 📩 Connect with our team to continue the conversation: 🌐 Website: www.archerint.com 📧 Email: contact@archerint.com 🔗 LinkedIn: https://www.linkedin.com/company/archer-energy-solutions-llc 🔗 Facebook: https://www.facebook.com/ArcherInternational #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resilience #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions

Does military action abroad increase risk to the U.S. Bulk Power System?

Global conflict doesn’t stay contained—it can ripple into critical infrastructure. In this episode of DirectConnect, Stacy Bresler and Steve Parker, Managing Partners at Archer Energy Solutions, explore a pressing question: Does military activity abroad increase risk to the U.S. Bulk Power System? From state-sponsored cyber threats to supply chain vulnerabilities, they break down what utilities should be thinking about right now—and what actions actually make a difference when time is limited. 💡 In this episode: How global conflicts elevate cyber risk to the grid Why many security recommendations come too late Practical steps you can take right now to strengthen defenses The importance of logging, monitoring, and incident response readiness Supply chain risks and what to watch for Why recovery planning may matter more than prevention ⚡ Whether you're an IT/OT Security Manager, Engineer, or Compliance Lead, this conversation cuts through the noise and focuses on what truly matters in high-risk moments. 📩 Want help strengthening your security posture? Contact Archer: contact@archerint.com #Cybersecurity #CriticalInfrastructure #NERC #CIPCompliance #OTSecurity #BulkPowerSystem #RiskManagement #DirectConnect #Archer

Cyber Attack on Poland's Electric System 2025

A cyber attack reached the edge of the electric grid, disrupted visibility, damaged equipment, and walked away. This isn’t theory anymore. Earlier this year, Dragos released an intelligence report on a cyber intrusion into Poland’s electric distribution systems. There was no massive blackout. No dramatic outage. And that’s exactly why this matters. This video explains why that incident wasn’t a failure — it was a proof of access. Attackers demonstrated repeatable access across distributed energy resources, disrupted communications, degraded operational visibility, and damaged equipment beyond repair. Then they stopped. Not because they couldn’t do more — but because they didn’t need to. What this signals is a shift the industry has been slow to confront: the grid is no longer centralized. Risk now lives at the edge — in DERs, remote access paths, identical configurations, third-party vendor connections, and visibility gaps that have been normalized for years. In this discussion, industry experts break down what the report really tells us about grid evolution, why cybersecurity and operations can no longer be separated, and how losing situational awareness may be more dangerous than losing power itself. If your organization relies on distributed assets, vendor access, or believes “low impact” systems aren’t critical — this conversation is about you. Link to the Document: https://hub.dragos.com/report/electrum-targeting-polands-electric-sector?_gl=1*1to76bn*_gcl_aw*R0NMLjE3Njk0NTQzOTguRUFJYUlRb2JDaE1JcGVYem92T3BrZ01WMnhxdEJoMV9NU3duRUFBWUFTQUFFZ0lMQnZEX0J3RQ..*_gcl_au*MTg5NTc2Mjk3LjE3NjU4MzA1NTguMTI2MzI5MDEzMS4xNzY5NzM1MzYxLjE3Njk3MzUzNjE.*_ga*MzE1NzU4NDc2LjE3NjU4MzA1NjA.*_ga_8Z0JSJN44D*czE3Njk3OTYwMTYkbzckZzEkdDE3Njk3OTc1MDQkajYwJGwwJGgw*_ga_7C51GTM128*czE3Njk3OTYwMTYkbzckZzEkdDE3Njk3OTc1MDYkajU4JGwwJGg4NTE2OTYwMDg. #CyberSecurity #CriticalInfrastructure #OTSecurity #PowerGrid #EnergySector #GridSecurity #NERC #FERC #CIP #Compliance #Resilience #Audit #InfrastructureProtection #CyberAttack #ArcherEnergySolutions #Poland #Attack

1 de 9