08-14-2017 BPU RPT 04 - Laserfiche WebLink

Home

W A T E R E N E R C Y I WI& P U B L I C U T I L I T I E S BOARD OF PUBLIC UTILITIES RIVERSIDE PUBLIC UTILITIES Board Memorandum DATE: AUGUST 14, 2017 ITEM NO: 4 SUBJECT: PURCHASE OF SERVERS AND TAPE DRIVES FOR ELECTRIC SCADA CYBER SECURITY IMPROVEMENTS FROM HEWLETT PACKARD ENTERPRISE OF PALO ALTO, CALIFORNIA FOR $62,181 — APPROVAL OF WORK ORDER NO. 1727191 FOR $110,000 ISSUES: Award purchase of Hewlett Packard servers and tape drives to Hewlett Packard Enterprise of Palo Alto, California in the amount of $62,181 and; approve Work Order No. 1727191 in the amount of $110,000 for Electric SCADA Cyber Security Improvements. RECOMMENDATIONS: That the Board of Public Utilities: Award purchase of Hewlett Packard servers and tape drives to Hewlett Packard Enterprise (HPE) in the amount of $62,180.66; and 2. Approve Work Order No. 1727191 in the amount of $110,000 for Electric SCADA Cyber Security Improvements. BACKGROUND: Riverside Public Utilities (RPU) hired Securicon, LLC to perform a Security Vulnerability Assessment in 2016. The resulting Vulnerability Assessment Report for the Electric Supervisor Control and Data Acquisition (SCADA) system listed risks ranging from High, Medium, to Low levels. Staff is working aggressively at formulating and executing an Implementation Plan addressing all identified risks. The Implementation Plan incorporates adherence to the North American Electric Reliability Corporation Critical Infrastructure Protection standards as best practices resulting in the following recommendations: 1. Deploying a suite of new SCADA Standard Practices to tighten cyber securities, improve maintenance practices, and formalize documentations. (Completed) 2. Upgrading existing software versions and purchasing new ones. (In progress) 3. Purchasing additional Network equipment such as switch and firewall. (On Order) 4. Purchasing additional System equipment such as servers, tape drives, and other related equipment. (Seeking Board approval) The following Network equipment was purchased to further secure and protect SCADA Electronic Security Perimeter.