Joy Ditto: The Evolution of Utility Cybersecurity with NERC CIP

About Joy Ditto:  Joy Ditto is a dynamic leader and influential figure in the energy sector. As the President and CEO of Joy Ditto Consulting, she advises companies on vital areas such as cyber and physical security, resilience, broadband, and clean energy development. With her strategic prowess, Joy helps organizations shape their engagement with the federal government and improve overall performance. Her exceptional track record includes being selected as part of a prestigious Blue-Ribbon Panel to assess the Tennessee Valley Authority's response to a major winter storm. Previously, as President and CEO of the American Public Power Association, Joy achieved remarkable milestones, including a substantial increase in revenue, tripled net worth, and securing a historic tax credit for clean energy development. Joy's expertise and media presence have garnered attention on crucial topics, and she has appeared in renowned outlets such as Bloomberg Radio and NPR. With a background encompassing Capitol Hill experience and influential roles in various organizations, Joy brings a wealth of knowledge and strategic insight to the energy sector.In this episode, Aaron and Joy Ditto discuss:The evolution of NERC CIP and the inclusion of cybersecurity.Transformative progress of cybersecurity in the power utility industry.Educating policy makers on OT and IT distinctions.The impact of AI on policy and operations in the OT space.Key Takeaways:The formation of NERC CIP and the development of reliability standards in the power industry were driven by the need to address integration challenges, ensure economic benefits, and mitigate the risks of cascading effects on the transmission grid, with cybersecurity considerations being added later during the implementation phase.The power utility industry has made significant progress in cybersecurity due to the implementation of NERC regulations, which have fostered an iterative and collaborative approach, enabling baseline maturity while allowing utilities to go above and beyond to protect critical assets.Recognizing the significance of clear communication and education in intricate domains such as cybersecurity, IT, and OT, it becomes vital to present policymakers and decision-makers with simplified yet precise information, empowering them to make well-informed choices while sidestepping unintended outcomes.Policy discussions surrounding AI in operational technology (OT) must carefully navigate its potential benefits in areas like cybersecurity and efficiency while addressing concerns about control, manipulation, and potential risks, emphasizing the importance of a balanced approach to its responsible implementation.  "Even though we see danger in deploying AI and maybe cutting jobs out from people, maybe there's gonna be a positive there too, like professionals who come into play, right? We need a diversity of people in our industry to be able to manage these challenges." — Joy Ditto Connect with Joy Ditto:  Email: joy@joydittoconsulting.comPhone: (703) 861-6361LinkedIn: https://www.linkedin.com/in/joy-ditto-utc/Twitter: https://twitter.com/joyditto?lang=enConnect with Aaron:LinkedIn: https://www.linkedin.com/in/aaronccrowLearn more about Industrial Defender:Website: https://www.industrialdefender.com/podcast LinkedIn: https://www.linkedin.com/company/industrial-defender-inc/Twitter: https://twitter.com/iDefend_ICSYouTube: https://www.youtube.com/@industrialdefender7120Audio production by Turnkey Podcast Productions. You're the expert. Your podcast will prove it.