This article provides a succinct summary of a collaborative pilot project between the Electric Power Research Institute (EPRI) and VectorZero, a Reston-based cybersecurity and data governance startup.
The project aimed to assess VectorZero’s Active Data Vault (ADV) and its potential to enhance cybersecurity and data governance in the electric power sector. The findings highlight ADV’s commendable performance in encryption, usability, and data governance, making it a compelling solution for addressing industry challenges.
- Enhanced Cybersecurity: ADV demonstrated robust capabilities in encrypting data, storing files securely, and seamlessly running utility applications, contributing to risk reduction in cyber threats and data breaches.
- Usability: During the pilot, ADV proved user-friendly, integrating seamlessly with EPRI’s utility applications and datasets, making it a valuable tool for professionals across various departments.
- Data Governance: ADV’s features streamlined data management, providing complete logs for intuitive tracking, audit trails, and access controls, aligning with industry regulations and enterprise protocols.
Utility Cybersecurity Challenges
The full white paper outlines several cybersecurity challenges faced by utilities, including general cybersecurity issues, customer data leakage, NERC CIP compliance, cloud migration obstacles, Zero Trust adoption, data governance challenges, integration complexities, compromised edge devices, APTs, ransomware, and espionage.
VectorZero’s Active Data Vault Features
The paper details six key features of ADV:
- Automated Moving Target Defense
- Confidential Computing
- Secure Multiparty Computation (SMPC)
- Quantum Hardened
- Supply Chain Security & Governance
- Frontroom Virtual Machines
About The Pilot
- The pilot, facilitated through EPRI’s Incubatenergy Labs program, was a collaboration between EPRI and VectorZero.
- The evaluation took place at the EPRI Knoxville Cyber Lab, assessing ADV’s compatibility and effectiveness in the utility environment.
- The lab’s Cyber Security and Research Laboratory played a crucial role, offering extensive resources for testing and evaluation.
Identified Utility Use Cases, Tests Conducted, & Results
The pilot addressed specific utility use cases, including Highly Secure Configuration File Backups, NERC CIP Compliance, Zero Trust Implementation, Data Governance, and Virtual Machines for Secure Edge. Results demonstrated ADV’s effectiveness in enhancing security, usability, and adaptability.
The collaborative effort between EPRI and VectorZero showcased ADV’s potential to address cybersecurity and data governance challenges in the electric power industry. The white paper emphasizes the adaptability, security features, and user-friendly interface of ADV, positioning it as a valuable asset for utilities looking to bolster digital defenses and protect sensitive data assets. The successful pilot sets the stage for future collaborations, signaling ADV’s role in advancing cybersecurity practices in the evolving electric power sector.