Cybersecurity of electric infrastructure and facility power

""

Is dependence to electric power the Achilles heel for businesses against the emerging cybersecurity threats? 

Cybersecurity threats to electric infrastructure continues to be a top-of-mind topic for many business executives. From healthcare and data center facilities to commercial and industrial buildings, businesses depend on electric power to continue their operations. Moreover, this dependence has been further amplified with the greater adoption of connectivity and increased interdependence of sub-systems and processes within a facility or business.

For those that oversee these facilities and power generation equipment, being future-ready requires increased cybersecurity. This is a challenge. At Cummins Inc., we make our partners’ challenges our challenges; make their goals, our goals. 

To help our partners in these industries be future-ready, we have asked three experts their take on the cybersecurity of electric infrastructure. These three perspectives aim to provide you with diverse viewpoints on how to strengthen your facilities' cybersecurity.

How do cybersecurity gaps threaten our electric infrastructure?

Professor Alan Woodward, an internationally renowned computer security expert, offered his perspective on this question. Alan has particular expertise and current research interests in cyber security, covert communications, forensic computing and image processing. Alan is currently a Visiting Professor at Surrey Centre for Cyber Security, University of Surrey. You can follow Alan on Twitter at @ProfWoodward.

Here is Alan’s take on cybersecurity and infrastructure. 

There is more computing power in embedded systems today than is used on desktop computers, yet it goes largely untended. As soon as any system is made "intelligent" it becomes a target for hackers. Being embedded and untended, these systems go on for years without the upgrades that are necessary to keep them secure. Moreover, remote monitoring has moved from private networks to using the internet as the means for communications. Put these together and you have a target that is at high risk of remote attack.

Anyone looking after systems that have any embedded computing power needs to manage that computing infrastructure just as if it was in a data center hosting thousands of websites. It is even more difficult in infrastructure, as some vendors don't always keep their software updated. We've seen examples of scanners in hospitals that could be upgraded to escape ransomware, yet the scanner manufacturer didn't support the latest software. Anyone managing these devices needs to look at the horizon and think "what if."

Choosing your equipment vendors has also taken a different dimension. It's no longer just about who has what certification, meets which standard, or has the best hardware maintenance operation. Now, you need to explore how the vendors keep the software embedded in your equipment up to date and respond to any cybersecurity threats. 

Those managing infrastructure have the worst of both worlds. Hackers are beginning to see them as the soft spot for attacks, and not all equipment manufacturers see software security as part of their core business. 

It's vital to remember that it's not just the embedded software that can cause infrastructure issues. You need to be aware of the interdependency between software that directly controls infrastructure and other systems. For example, if a payments system is held to ransom, could your pipeline continue to operate even though the direct control systems were fully functional?

How to prevent cybersecurity threats that could result in power outages?

We have asked this question to Kenneth Holley. Kenneth founded Silent Quadrant – a Washington, D.C.-based digital protection agency and consulting practice – in 1993. Over the past 28 years, Silent Quadrant has delivered digital security, digital transformation, and risk management to the world's most influential government affairs firms, associations, and businesses. With a particular focus on infrastructure security and threat modeling, Kenneth has assisted many clients ensure brand and profile security. You can follow Kenneth on Twitter at @KennethHolley.

Let’s look at Kenneth’s perspective on preventing cybersecurity threats that could result in power outages.

As facilities technology continues its rapid emergence, facility managers and operators have become increasingly reliant on integrated technologies and iot. This convergence of IT and operational technology (OT) underscores the critical role of facility executives. This critical role is to ensure systems security, resiliency, and facility business continuity.  

Facilities need to understand very clearly that there is a new dynamic. Intelligent organizations leverage connected sensors, facilities automation systems, and actionable intelligence to optimize operations and business continuity. This new dynamic means that the threats are now everywhere. This establishes a new level of criticality securing those connected systems designed to prevent power outages.

I encourage all facilities, as part of a broader security assessment, to immediately focus on the following Center for Internet Security (CIS) controls:

  • Secure Configuration of Enterprise Assets and Software (CIS Control 4): Establish and maintain the secure configuration of enterprise assets (end-user devices, network devices, non-computing/iot devices, and servers) and software.
  • Account Management (CIS Control 5): Use processes and tools to assign and manage authorization to credentials for accounts. This includes user and administrator accounts, as well as service accounts.
  • Access Control (CIS Control 6): Use processes and tools to create, assign, manage, and revoke access credentials and privileges for user, administrator, and service accounts.
  • Security Awareness and Skills Training (CIS Control 14): Establish and maintain a security awareness program. The aim here is to influence behavior among the workforce to be security conscious and properly skilled to reduce cybersecurity risks.
The 18 Center for Internet Security Controls

Visibility of all assets within your facility is critical. You cannot hope to protect and provide resilience for what you cannot see and control. At the end of the day, integrated and interconnected technologies are designed to enhance overall business continuity. This requires a renewed operational approach to security. 

Cybersecurity in a product’s design and the complete life-cycle

Dwayne Smith brings us the third perspective on this topic. Dwayne has extensive experience in cybersecurity and the adoption of technologies that support a multitude of applications. Those applications also include power generation and electrical distribution. As an engineer in the fields of nuclear and cybersecurity, he has supported initiatives across multiple customers within the Department of Defense, intelligence community, telecommunication, and other commercial business segments. In his current role, Dwayne works within industries that support data centers, manufacturing, marine, rail, and automotive. Dwayne is currently the Global Cybersecurity Engineering Director at Cummins. 

Industries have and will continue to transform the way they design and build solutions. The introduction of new techniques to innovate and deliver products in a more efficient manner account for cybersecurity early in those processes.  

These new techniques rely on how we think about cybersecurity as a priority within the design and manufacturing processes that produce these new products. This requires cybersecurity to be more than a concept that is thought about as a discrete and separate discipline.
Cybersecurity is now something embedded in a product's lifecycle. Having cybersecurity embedded in how you build products eliminates the need for bolt on protections or to surround the product with protective technologies. These add-ons can be costly to manage, may hamper the performance of a product, or require the early retirement of a product. 

Taking the proactive step to include cybersecurity early in these processes ensures that the product can be resilient over time. This approach can also increase the service time and life of a product so that it can adapt to evolving cyber threats. This reduces the risk impact and ultimately moves cybersecurity from a concept to a measurable quality metric.

The traditional ways of how systems are engineered, tested, and operated already consider the benefits of software and firmware that deliver the adoption of desired features. 

Now, how these systems are engineered, tested, and operated also need to consider the data they collect or generate. That data is key to improving and sustaining products for both the product owner and the product supplier. How to retrieve that data for use, whether through a remote connection across the internet or from within a larger enterprise network requires that cybersecurity be considered end to end during a products life cycle.

Sign up below for Energy IQ to receive energy focused insights in markets ranging from data centers and healthcare facilities, to schools and manufacturing facilities, and everything beyond. To learn more about power solutions Cummins offers, visit our webpage.

Aytek Yuksel - Cummins Inc

Aytek Yuksel

Aytek Yuksel is the Content Marketing Leader for Cummins Inc., with a focus on Power Systems markets. Aytek joined the Company in 2008. Since then, he has worked in several marketing roles and now brings you the learnings from our key markets ranging from industrial to residential markets. Aytek lives in Minneapolis, Minnesota with his wife and two kids.

STEM Project Unites Children in the UK and Uzbekistan

Zoom call with West Park School and the Children's Home

If you ever doubted the ability of young minds to grasp what many adults would consider complex concepts, then you'll be amazed by the achievements of two groups of young children - one in a school in northern England, and the other 4,000 miles away in an orphanage in Uzbekistan.

With the support of Cummins, children ranging from six to twelve years of age have managed to bridge the language, culture, and time divide. They are collaborating with great success on building a basic electric racing car.

The story begins with a visit by Cummins to Rudmash Export Service, which has been representing Cummins in Tashkent, the capital of Uzbekistan, since 2018.

Rudmash has an impressive list of clients in mining, construction, gas, and power generation.

It is also a highly respected supporter of community initiatives, a key focus for Cummins.

During the visit, Amit Kumar, Cummins' Technical Territory Manager for the Commonwealth of Independent States (CIS) region, mentioned the work he was doing with local schools involving the Greenpower Education Trust in the UK.

Amit suggested that Rudmash might consider introducing local children to the fantastic learning opportunity that comes from building an electric car.

The Rudmash executive team loved the idea and reached out to their friends at the local orphanage (Children’s Home 22), about the proposed connection with children from West Park Academy – a primary school near Cummins' manufacturing plant in Darlington, England.

Students at the Children's Home working on the car
The children from Children's Home 22 building the car

Speaking through a translator, Rudmash Sales Manager Mr. Mavlonberdi Akhmedov said there was no hesitation from the orphanage. "Everyone was excited about it," he said. "When we showed them pictures of the car, the children's eyes lit up with interest.

"The only issue we encountered was not being able to involve the older children, but I think Amit has something in his mind for them. It will involve a similar collaboration with a UK school on a larger electric car that they can fit in!"

Over in Darlington, teacher Mr. David Fraser and his group of 9 to 11-year-olds were thrilled at the prospect of working with children from another country.

Students from West Park Academy
The children from West Park Academy

"Before our first session, I showed the children a map of Uzbekistan and explained how the time zones worked," Mr. Fraser said. "Tashkent is four hours ahead of us."

"When they started hearing a different language, they were a little hesitant although still excited. However, towards the end, once they got used to the translation pauses, lots of questions were being asked."

"They adapted very quickly, and every session with the orphanage has become more engaging. The children have greatly benefited from the relationship. It's been a great learning experience."

The car involved in the project is called the Greenpower Goblin G2. It comes as a flat-pack kit including chassis, wheels, steering, disc brakes, a 24V electric motor, and two 12V batteries.

Students at West Park Academy working on the car
The children from West Park Academy building the car

"The project is all about inspiring young children to take an interest in engineering in a fun and innovative way," said Amit Kumar, who earlier this year received special recognition at the North-East England STEM (Science, Technology, Engineering, and Mathematics) Awards for his years of dedication to STEM Education.

"The build introduces children to basic mechanics and electronics and might be the first step on the pathway to a career in engineering or another STEM field.

Mr. Fraser said the children soon started discussing aspects of the car such as frames, brakes, and steering geometry. There was a lively question-and-answer session on different materials that could be used to design and make the car's body. Their last session was about controls and driving.

"There are also other general discussions, as the children are eager to learn more about each other's countries," said Amit, who leads the sessions.

Students at the Children's Home looking at the car drawing
The children from Children's Home 22 talking about a drawing while on a zoom call

Rudmash service engineer Mr. Abdullayev Shakhzod said the children were enjoying the experience of working in teams.

"It's a fantastic new chapter in the history of a place that has a storied past. It was established in 1942 during the Second World War to care for evacuees from all over Eastern Europe. Children of over 40 different nationalities have been cared for by this children's home.

"The home is named Antonina Pavlovna Khlebushkina after the woman who ran it in the early days. She would be so proud of what is happening there today.

"As the summer vacation times differ in the two countries, the West Park school children have already finished building their cars, while the Uzbekistan car is about 40% complete.

"When the children return from their summer camp in September, they will start the rear axle, motor, and electrical components. Then they can take it for a drive," Amit said.

"Just before their summer term ended, the West Park children conducted a demonstration for their new friends in Tashkent. They set up a track and showcased driving the car on it. It was a great success."

Mr. Akhmedov, speaking through a translator, mentioned that the management team at Rudmash was considering how the project could expand beyond the children's home and into schools and youth organizations throughout Uzbekistan.

Mr. Akhmedov praised Cummins for their support of the project. "They have shown great responsibility at every stage and been very proactive, always striving to ensure things are done right.

"This is just the beginning for these children. It's already motivating them to learn more and develop their skills in broader technical applications.

"I would say that this project is not only important for the children's home but also for our city of Tashkent and the Republic of Uzbekistan, as it is nurturing an educational culture that is highly valuable. I can't thank Amit and Cummins enough."

Amit expressed that it's a privilege to help Cummins inspire young people about engineering and science from an early age.

How is the United States investing in clean energy?

GR hero

Our planet is facing a dire crisis: carbon dioxide concentrations in the atmosphere continue to soar above record highs. If gone unaddressed, the collective stress of climate change will produce an irreparable impact. Our health, energy, water, and food ecosystems are at risk. 

As it stands, there are many long-term effects of climate change. In North America, climate change is forecasted to cause decreasing snowpack in the western mountains. It will also lead to a 5–20% increase in yields of rain-fed agriculture and great intensity of heat waves. In fact, over the last five years, the United States has incurred roughly $120 billion a year in damages as a result of natural disasters caused by extreme weather and climate events.

Beyond natural catastrophes, climatic risks to the United States will have a cascading effect on the country's interconnected ecosystems. Reduced labor and overall economic productivity, and altered crop yields, will disproportionately harm lower-income and marginalized populations. These groups lack the resources to prepare or cope with extreme weather and climate events.

The world is investing in clean energy innovation

Combating the intensifying climate crisis requires a strategic combination of research and development (R&D), innovation, technology — and bold attempts.

Around the globe, countries are investing in clean energy to contribute to a livable planet now and for generations to come. In 2022, the US passed the Inflation Reduction Act, which includes a historic $370 billion investment to address the climate crisis. The Inflation Reduction Act provides tax credits and incentives to power homes, businesses, and communities with clean energy by 2030. The Act will increase investments in the fastest-growing power generation technologies, solar and wind. It will also advance cost-saving clean energy projects and protect two million acres of national forests. These initiatives are in addition to substantial tax credits and rebates offered to families and businesses in the United States.
Consequently, a stronger clean energy economy will contribute to overall economic growth and competition. As a result, there will be millions of new well-paying jobs for Americans to make clean energy.

It is possible to start decarbonizing now

Governmental policy strategies and investments in decarbonization technologies are part of the solution to produce increasingly cheap, dependable, and clean energy.

Strong communities and vibrant economies depend on a healthier planet. As a global power technology leader, Cummins is in a unique position to power customer success by leading during this energy transition. We intent to do so by providing customers with the right technology at the right time, understanding of their needs and applications.

We think of this journey to carbon neutrality in two distinct and complementary ways. First, by innovating zero-emission solutions and introducing them in markets and applications where the infrastructure, development and deployment are ready. Secondly, by advancing internal combustion engines through efficiency improvement and by running them on cleaner alternative fuels for a well-to-wheels solution.

Through Destination Zero, we are advancing low- and no-carbon platforms. This includes diesel and natural gas engines, hybrid, and electric platforms, as well as powertrain components, controls, and related technologies.

Join Cummins in powering a better tomorrow

Cummins environmental sustainability strategy includes goals timed for 2030. Progress toward the reduction of carbon emissions from company plants and facilities — in addition to our products — is in full swing. For more than one hundred years, we have brought technological solutions to market. As a power solutions leader, we will continue to power a more prosperous world for today and tomorrow. Are you ready to consider investing in new power solutions?

Traci Kraus headshot

Traci Kraus

Traci Kraus is a Director of Government Relations where she leads US federal advocacy for Cummins. She focuses on energy, climate, hydrogen, transportation and budget legislative and regulatory issues. 

Prior to joining Cummins, Traci worked for former U.S. Senator Russ Feingold.  She has a Master's in Public Administration from the George Washington University and B.A.s in Government and Politics and Communication from the University of Maryland in College Park. She is originally from Chicago, and now lives outside of Washington, D.C. with her husband, Aaron and two children Liam (8) and Sloane (5).

Redirigir a
cummins.com

La información que busca está en
cummins.com

Estamos lanzando ese sitio para usted ahora.

Gracias.