for MORE Info visit assettovendor.com
PRESS RELEASE: FORTRESS INFORMATION SECURITY ADDS SOUTHERN COMPANY AS NEW PARTNER IN SECURING U.S. POWER GRID
Power Utilities Share the Same Cyber Security Challenges
Third PARTY RISK MANAGEMENT
CYCLE TIME: Takes years to risk rank vendors populations
COST & FREQUENCY: Point-in-time assessments creates gaps in risk awareness
EFFECTIVENESS: Non-responsive vendors challenge risk management goals
ASSET RISK MANAGEMENT
DECENTRALIZATION: Silos lead to inconsistent governance
NO SINGLE PANE OF GLASS: Disparate tools create inefficiencies
DUPLICATION OF EFFORTS: Each organization verifies the same patch/solution
COLLABORATION is the answer
Introducing the Asset to Vendor Network (A2V),
A mutual assistance platform for third party and asset risk management teams
Asset to Vendor Network is a mutual assistance platform for utilities who share the cost of vendor risk assessments and cyber asset vulnerability patches and solutions to reduce duplication and meet compliance requirements. Visit the Asset to Vendor website to learn more.
» Records are created once, shared with many
» Automatically risk ranking & Prioritization
» Continuous operational monitoring
» less burdensome for vendors
For a detailed explanation of the rationale and strategy of the Asset to Vendor Network, download the white paper:
ASSET TO VENDOR NETWORK FOR POWER UTILITIES
How A2V Works
PRESS RELEASE: FORTRESS LAUNCHES ASSET TO VENDOR NETWORK JOINT VENTURE WITH AEP TO HELP PROTECT THE POWER GRID FROM CYBER THREATS
Outcomes of A2V
THIRD PARTY RISK MANAGEMENT
CYCLE TIME: Reduces turn time from years to days
FREQUENCY: Continuous operational monitoring
EFFECTIVENESS: Collective bargaining power is leveraged to accelerate remediation
ASSET RISK MANAGEMENT
CENTRALIZATION: Connecting Silos to increase efficiency and effectiveness
VISIBILITY & CLARITY: Fully integrated with point solutions into a single pane of glass
REDUCED DUPLICATION OF EFFORTS: Data is shared between organizations
A2V LOAD-BALANCES EFFORT AND RISK
Organizations share many of the same assets and vendors. Smaller companies have fewer resources to invest in securing the perimeter, which increases the risk for the whole grid. A2V Resolves this imbalance.
A2V Connects Assets and Vendors in a Holistic Approach in Compliance with NERC CIP-013.
Powered by Fortress Technology
The Fortress platform Provides Supply chain risk and Vulnerability risk Management solutions for Assets and Vendors.
» System of Record for NERC Compliance.
» Connects Assets to Vendors in Compliance with NERC CIP-013.
» Automated Risk Ranking for Faster Prioritization
» Deep Analytics with Data Exploration
» Bundled Continuous Monitoring
The Fortress Platform currently helps secure 10% of the US power grid & key assets.
FORTRESS IN THE NEWS
The Department of Energy (DOE) will issue a notice of proposed rule-making (NOPR) to implement President Trump’s broad bulk power system (BPS) security executive order (EO) “later this fall,” a DOE official confirmed to POWER on Oct. 5. Though the...
Marking another major federal effort to address potential supply chain risks to the bulk power system (BPS), the Federal Energy Regulatory Commission (FERC) on Sept. 17 sought industry’s perspective on a number of important considerations,...
FERC investigates risk of foreign adversary-supplied bulk power equipment, with focus on Huawei, ZTE
If utilities are forced to pull suspect components from the grid then the cost implications could be significant, according to Tobias Whitney, vice president of energy security solutions at Fortress Information Security. The average utility could...
Get in touch
Want to find out how Fortress can solve problems specific to your business?