Cybersecurity Course – TORCH: Training, Outreach, and Recruiting for Cybersecurity in Hydropower

This training offers hydropower professionals at all levels — from plant operations to business systems — an opportunity to learn about and implement cybersecurity best practices to better prepare for protection of hydropower facilities.

Participants will experience various threat scenarios against a hydropower plant that can happen due to cyber-physical interactions.

The associated training materials provide a realistic understanding of cybersecurity consequences and will include various realistic scenarios, as well as the role of operations and business systems staff in responding to cyberattacks.

Participants will walk away from the training with an appreciation of the importance of cybersecurity efforts in maintaining a safe and reliable hydropower system. These outcomes will result in a better informed, more diverse hydropower cybersecurity community with the understanding needed to maintain a secure and reliable hydropower fleet that delivers flexible generation and storage, integrates intermittent renewables, and supports the nation’s progress toward a carbon-free energy future.

AGENDA

1:00–1:15 pm: Get to know each other; let’s begin!
1:15–2:00 pm: Cybersecurity Academy 101: Back to basics
2:00–2:45 pm: Acquisition Cybersecurity: Real or Fake? You determine.
2:45–3:00 pm: Threat actor demonstration on hydropower facility physical model – Cybersecurity and Infrastructure Security Agency (CISA)
3:00–3:30 pm: Event-wide break
3:35–4:30 pm: Full Crisis Mode: Open the flood gate, Hal.
4:30-5:00 pm: Cybersecurity Incident Responder: Improvement is the key to survival