CIM-UICDS Adapter UICDS Utility Geospatial Dashboard OMS Register Interests (Incidents) Reply (Profile) New Incident WorkProduct (ID) CREATED (Incident) CREATED (Incident) CREATED (CrewLocation) Sensor Observation Info (CrewLocation) CREATED (CrewLocation) CHANGED (CrewLocation) Sensor Observation Info (CrewLocation) CHANGED (CrewLocation) figure 2. A sample information exchange between utility and emergency operators. table 1. Overlap between utility CIM and emergency UICDS. Utility Domain Utility assets Overlap UICDS Domain Physical static asset Critical infrastructure Field crews First responders Crew dispatch Emergency dispatch Sharing Security Information Blue force tracking Operating the electrical grid requires data communication between the control center and remote sites. Support tools in today's EMS products do not consider the cybersecurity functions associated with these data streams; this means that operators of the electrical grid are largely unaware of any possible threats to the integrity of the data they are using. One function of the control center is to send control signals back out to the grid to operate the grid reliably; these communications could also be compromised. The ES-C2M2 highlights the need for holistic situational awareness. ES-C2M2 also outlines the need for a security professional in the utility to create and share a common operational picture with others in the utility, including the operators. The operators in the control room need visibility into the cybersecurity threats and to understand how a breach in cybersecurity will affect the power system. This requires enhancements to the EMS Crew location Mobile asset Operating jurisdiction Outages/system events Cross-jurisdiction Event Incidents/CAP alerts SCADA/mobile data Sensor data Geographic information system OGC geospatial standards Incident command system Incident command system CIM naming/ mRID 98 No specific, well-advertised tools exist to extract this data. However, certain diagnostic and network-monitoring tools may be useful in gathering evidence of this kind. One important area to consider for these tools is that they are flexible in different environments and able to adapt to different production companies. They must also have a low run-time foot print so as not to disrupt the higher-priority grid operations. ID ieee power & energy magazine Work product ID/IG january/february 2016