After spending 15 years at EPRI dealing with cutting edge problems, I have found there are significantly fewer problems looking for solutions than there are solutions looking for problems. Additionally, some of the problems looking for solutions are looking because they are so difficult and complex to solve, such as control system cyber security. I have been in too many meetings with "experts" who have solutions but have no idea of what problems control systems have actually experienced, much less what impact these "solutions" may have on control system performance. I am concerned about FUD. However, there have been many control system cyber security events. Most of these have been unintentional and many of those caused by use of inappropriate security policies, procedures, technologies, or testing. We need to be careful the cure isn't worse then the disease.
Joe Weiss
