Case Study: a rural electric cooperative strengthens cyber security and builds a 3-year roadmap with NCC Group

Rural Electric Cooperative builds a 3-year cybersecurity roadmap with NCC Group

A rural electric cooperative faced significant cybersecurity challenges during its IT and OT systems transformation. New software and expanded remote support for substations introduced vulnerabilities, and the cooperative needed to meet the security objectives of the NRECA RC3 program. They engaged NCC Group’s Facility Due Diligence team, which utilized its Validated Architecture Design Review (VADR) methodology.

NCC Group conducted thorough assessments, identifying critical issues like unauthorized access to energy management systems and malware. Their recommendations included implementing a Privileged Access Management System, multi-factor authentication, and improved mobile security. As a result, the cooperative not only met RC3 requirements but also developed a clear three-year cybersecurity investment roadmap, standardized its architecture on NIST and IEC/ISO 62443 standards, and provided enhanced training for its staff.