City of Lakeland • FL • opengov
CIP-005-7 and CIP-007-6 OT Firewall Infrastructure and Compliance Assessment
View original posting
Submit your bid directly on the source platform.
Summary
Lakeland Electric (LAK) is seeking a qualified Consultant to conduct an independent evaluation of its Operational Technology (OT) network and perform a comprehensive gap analysis with respect to NERC CIP-005-7 and CIP-007-6 R4 & R5 compliance requirements, as applicable to firewalls and firewall infrastructure only. The Consultant shall assess LAK's current compliance and security posture, identify compliance gaps and security risk related to Electronic Security Perimeter and firewall controls, and provide clear, actionable and prioritized recommendations to remediate identified deficiencies.
Full description
Lakeland Electric (“LAK”) operates critical infrastructure that requires robust cybersecurity measures. The Energy Management System (EMS) is vital to the operation, reliability, and safety of our services. Lakeland Electric is committed to ensuring the security and reliability of its cyber assets.General information about Lakeland Electric:LAK is a vertically integrated municipal electric utility that is owned and operated by the City of Lakeland (“City”). LAK serves approximately 256 square miles located entirely within Polk County, Florida.LAK’s transmission system consists of approximately 28 circuit miles of 230kV lines and approximately 135 circuit miles of 69kV sub-transmission lines. LAK has 8 synchronous tie lines with 3 different utilities, Duke Energy Florida (2-230 kV ties), Tampa Electric Company (2-230 kV ties and 3-69 kV ties), and Orlando Utilities Commission (1-230 kV tie). LAK owns and operates its own generating units.Regarding LAK’s facilities, LAK has two control centers that are rated as medium impact. LAK has seven BES substations and one generating unit that are rated as low impact. LAK does not have any facilities that are rated as high impact.LAK identifies its Energy Management System (EMS) as the “OT network” with respect to this RFP. The Energy Management System is classified as a single Cyber System. There are approximately 151 in-scope cyber assets, 145 of which have External Routable Connectivity contained within an extended Electronic Security Perimeter . The EMS is protected by an extended Electronic Security Perimeter that is created by three (3) physical cyber assets (firewall) operating as a cluster that is managed by a virtual firewall management server.
Attachments
Contact
- Email:
- eshia.smith@lakelandelectric.com
- Phone:
- (863)834-6821
- Title:
- Electric Planning Specialist
- Address:
- [object Object]
Addenda
Addenda tracking is being rolled out. You will receive updates as soon as changes are detected.