Description

NAESCO members are at the forefront of delivering Utility and Facility energy projects using UESC and ESPC performance contract vehicles. The recent Infrastructure Act and federal policy now requires cybersecurity of the control systems be included in the design, construction and operations phases for the life of the project. DoD, DOE and GSA have been the lead agencies developing the cybersecurity design and construction guidance and standards. This webinar will review the current legislation and policy guidance and requirements, how to cybersecure the control systems and how to perform Continuous Monitoring throughout the Operations phase.

The webinar will first review the DoD Unified Facility Criteria, UFC 4-010-06 Cybersecurity Of Facility-Related Control Systems. The UFC is the first cybersecurity design guidance written specifically for the architect, engineer, systems integrator and operators that plan, construct and operate the diverse number of DoD control systems. The UFC outlines the design sequence to follow the Risk Management Framework (RMF) and is one key milestone within the broader Cyber Security Efforts underway within the DoD and the federal government.

Even though the UFC was written specifically for DoD, the RMF process and the way the UFC was written is general; any organization can use the UFC to design their Control Systems (CS). Lastly, the webinar will review the organization Event/Incident Response Plan and Contingency Plan.

Presenters

Mike Chipley, PhD, GICSP, PMP, LEED, President of the PMC Group

Biography

Dr. Chipley has over 30 years of consulting experience in the areas of Program and Project Management, Cybersecurity, Energy and Environmental (LEED, Energy Star, and Carbon Footprint); Critical Infrastructure Protection and Analysis; Building Information Modeling (BIM) Technology; Base Realignment and Closure (BRAC), and Emergency Management/Disaster Recovery. He served 24 years as a Civil Engineer in the US Air Force and has been consulting since 2001.

Dr. Chipley is a former adjunct faculty member at George Mason University where he taught the Infrastructure Security Engineering, Building Security, and Building Information Modeling courses. He is the principal author of the Whole Building Design Guide Cybersecurity Resource page, the DoD ESTCP Cybersecurity Resource page, FEMA 426 Reference Manual to Mitigate Buildings Against Terrorist Attacks, FEMA 453 Design Guidance for Multi-Hazard Shelters; co-author of the 427, 428, 429 and 452 FEMA risk mitigation series publications, developed and taught the FEMA E155 Building Security course, and a team member that developed the Integrated Rapid Visualization (IRVS) tool.

He is a former President of the DC Chapter of Control Systems Association International, former Executive Vice President of the Security and Risk Management Association, former Co-Chair of the Emergency Preparedness and Homeland Security Committee of the NoVA Society of American Military Engineers, and an active member of the US Green Building Council National Capital region chapter, the George Washington Lambda Alpha chapter, and the Washington DC Project Management Institute chapter. 

NOTE: Beginning in 2023, all NAESCO webinars will be offered to all attendees at no cost. Recordings and slides will be available to members only, after the webinar.