215
reGulations and standards
security within an electric utility, and the use of the ISO/ IEC 17799
standard (predecessor of ISO 27000).
7.2.10 Treatment of Information Security for Electric Power Utilities
Working Group D2.22 published the document, Treatment of
Information Security for Electric Power Utilities. e document includes
three reports:
• Risk Assessment of Information and Communication Systems
13
• Security Frameworks for Electric Power Utilities
14
and
• Security Technologies Guideline
15
e three reports provide practical guidelines and experiences for
determining security risks in power systems and the development of
frameworks, including control system security domains.
7.2.11 North American Electric Reliability Corporation
e ...