Back to the main page
Protecting the Electric Grid in a Dangerous World
Sweeping new security standards announced in March 2014 by the Federal Energy Regulatory Commission (FERC) mean that North America's power suppliers and distributors face intense new pressure to protect the bulk electric system, including sensitive data.
"Power suppliers and distributors are coming to grips with a new environment in which control systems are exposed to the world—in some cases, a hostile world," says Naresh Persaud, Oracle's senior director of product marketing, security.
Oracle provides a
comprehensive portfolio of database security solutions to help suppliers and distributors drive enterprisewide compliance with the new Critical Infrastructure Protection (CIP) standards—without sacrificing operational or resource efficiency.
A Solution Roadmap
The white paper, "Protecting the Electric Grid in a Dangerous World," maps individual CIP standards to specific Oracle solutions.
As the white paper reveals, identity management is an indispensable tool for sustainable, manageable, and auditable access controls.
"But identity management alone is not sufficient," says Persaud. "The data itself must be protected, particularly the highly sensitive data outlined in the new standards."
That data includes
- Operational procedures and lists of critical assets
- Network topologies or similar diagrams
- Floor plans of computing centers and equipment layouts involving critical assets
- Disaster recovery and incident response plans
- Security configuration information
To secure data where it lives—inside the database—Oracle Database security solutions deliver not just encryption and data masking but also access control and monitoring. Specific solutions include the following.
- Oracle Database Vault provides strong privileged user access control, adding powerful controls within the database itself.
- Oracle Advanced Security provides both transparent data encryption and on-the-fly redaction of display data.
- Oracle Data Masking Pack replaces sensitive data with realistic values, so organizations can safely use production data for development, testing, sharing, and other nonproduction purposes.
- Oracle Audit Vault and Database Firewall provides the first line of defense against SQL injection threats. It also enforces the trust-but-verify principle through consolidation of audit data from databases, operating systems, and directories.
- Oracle Label Security enables data classification by assigning a data label to each row in an application table.
- Oracle Database Lifecycle Management Pack helps automate the processes required to manage the Oracle Database lifecycle.
Download the white paper, "Protecting the Electric Grid in a Dangerous World."
Learn more about Oracle's comprehensive portfolio of database security solutions.