ConsoleWorks solves this challenge with a device and platform agnostic approach to BCM for all routable protocol devices. From the control room, to the substation, to the pole, ConsoleWorks automates baseline configuration management of all cyber assets.

Where alternative automated BCM solutions exist they are typically device or brand specific, often developed as part of a device family for a particular vendor. Functionality varies widely from manufacturer to manufacturer and many common components (servers, routers, appliances) are not covered effectively (if at all) by the solutions available.

ConsoleWorks Baseline Configuration Management (BCM) is an automated BCM solution that addresses a significant portion of CIP-010-5 R1 & R2. The solution provides:

• Device Agnostic/ Platform Agnostic Support
• Automated device configuration retrieval
• Automated comparison of current configuration to baseline configuration
• Automated comparison of current configuration to baseline configuration
• Automated Event Detection and Alerting
• Logging over the entire BCM process for all devices
• Digitally-signed logs for compliance reporting and forensic history

Whitepaper CIP-010-5 R1 R2

NERC-CIP-010-5 R1 R2 DRAFT. The Importance of Baseline Configuration as a Critical Security Management Control.
NERC-CIP-010-5 R1 R2 Whitepaper

Solution Brief: Baseline Configuration Management

The ConsoleWorks Baseline Configuration Management Solution offers Utility providers a unified solution for automating baseline configuration management of all cyber assets from the Control Room to the Substation to the Pole.
Solution Brief: Baseline Configuration Management

ConsoleWorks solves this challenge with a unique, and highly secure, Remote Access Management solution. ConsoleWorks provides true separation of networks (remote user, ESP), allowing only ASCII text to be passed to and from the ESP (no viruses or malware). The fine-grained privilege model in ConsoleWorks gives the Utility provider control over assets each user may interact with. Least privilege automatically defaults to “deny” and supports command-by-command privileged grants for absolute control over remote users. Detailed activity logs (down to the keystroke) provide comprehensive forensic reporting, compliance data, and situational awareness over all remote user activity.

Whitepaper CIP-005-5 R2

NERC-CIP-005-5 R2 DRAFT. Understanding the Security Requirements for Remote Access Management to the Bulk Energy System
NERC-CIP-005-5 R2 Whitepaper

Solution Brief: Remote Access Management

The ConsoleWorks Remote Access Management Solution offers Utility providers a comprehensive security solution over remote user access with performance benefits that increase remote user productivity.
Solution Brief: Remote Access Management

What Are Configuration Ports?

Configuration ports exist on almost every hardware device in the IT infrastructure. These physical ports provide a special level of privilege access that can be used to:
1) Change Bios
2) Upgrade Firmware
3) Set Baseline Configuration
4) Build-out devices that have components (like servers)
5) Perform a variety of Administrative functions
6) Perform emergency repair or failure recovery when no other port is accessible

Except for power supply or catastrophic electronic component failure, configuration ports are active at all times – even when conditions have degraded a device to the point that no other port can accept communications. They are the default emergency access point for every IT device.

Per CIP-007-5 all ports should be either secured or disabled. This obviously includes configuration ports. However, most IT devices do not allow the disabling of these ports nor should these ports be disabled as they serve important purposes, including being the primary emergency access port. Instead, these ports must be secured.

Whitepaper CIP-007-5 R1

NERC-CIP-007-5 R1 DRAFT. Understanding the Importance and Relevance of Configuration Ports to Utility Cyber Security
NERC-CIP-007-5 R1 Whitepaper

Solution Brief: Configuration Port Security

Per CIP-007-5, all ports should be either secured or disabled. This obviously includes configuration ports. ConsoleWorks provides a means to secure these ports, helping Utility providers meet NERC-CIP requirements and pass NERC-CIP audits.
Solution Brief: Configuration Port Security

Smart Grid Cyber Security Assessment

The Smart Grid Cyber Security Assessment gives Utility companies clear line of sight into their current ability to meet security and compliance challenges in the IT Foundation of their control centers. The Evaluation brings to light the maturity of the Utility security practice from multiple perspectives and provides recommendations on how gaps can be addressed with IT Foundation Management.

The brochure is also useful for those interested in learning more about our problem/solution focus areas.

Download Assessment Brochure