For a large multinational electric utility with a large generation portfolio, a CRA energy team led by Andy Dressel, conducted a strategic review and enhancement of the organization’s Cyber Security Incident Response Plan (CSIRP) and Playbook.
The effort was designed to align the utility response protocols with evolving threat landscapes, emerging vulnerabilities, and current regulatory requirements, including CIP-008 standards.
The approach by CRA’s energy team included a comprehensive assessment of existing documentation, interviews with subject matter experts, and a gap analysis against regulatory obligations. Using these insights, the team developed a streamlined and effective CSIRP and Playbook that reflect required processes, integrate internal procedures with compliance mandates, and support ongoing operational resilience through annual reviews and incident response exercises. The updated framework strengthens readiness, ensures sustained regulatory adherence, and provides a robust foundation for managing cybersecurity incidents.
