The following are some of the major services that we provide to energy companies regarding Cyber Security:

• Development and maintenance of cyber security policy based on NERC CIP and Sarbanes Oxley standards. UDS Group provides services in developing Cyber Security Policy for all required areas including:

1. Security Environment, identification of Critical Assets & Critical Cyber Assets
2. Roles & Responsibilities for Critical Assets & Critical Cyber Assets, and Exceptions
3. Identification, Classification, & Protection of Information on Critical Cyber Assets
4. Physical & Electronic Security Perimeters
5. Physical & Electronic Access Control
6. Change Control including Life Cycle Management
7. Personnel Risk Assessment & Training
8. Monitoring Electronic & Physical Access
9. Cyber Vulnerability Assessment
10. System Security Management
11. Cyber Security Incident Response Plans
12. Cyber Security Recovery Plans

• UDS can assist your company in development and implementation of all of the procedures, plans, logs, and other documentation in support of Cyber Security Policy requirements.

• Development and maintenance of Risk Based Assessment for identification of critical cyber assets. Our methodology for this assessment includes the following steps:

1. System Characterization
2. Threat Identification
3. Vulnerability Identification
4. Control Analysis
5. Likelihood Determination
6. Impact Analysis
7. Risk Determination
8. Critical Cyber Assets Identification & Control Recommendations
9. Results Documentation

To learn more about UDS Group, or to discuss your specific needs with one of our associates, please Contact Us.