EPRI’s Matt Wakefield, in “EPRI Innovating Cybersecurity Metrics,” February’s Public Utilities Fortnightly:
“There’s not a standardized way to collect metrics associated with such things as, are you protecting your grid effectively, are you able to detect attacks, and how good are you at responding to those attacks? Most every utility has some form of metrics, but they’re not standardized. There are a lot of benefits to having an industry-wide, standardized approach.
You can almost say it’s analogous to grid reliability metrics. There is need for awareness at all levels. What’s our risk profile? Where do we need to make investments? Where are our investments paying off?”