
The exposure
Below the CIP threshold is still the grid.
Distribution utilities and cooperatives carry the same protocols and the same vendors as the bulk electric system, without the compliance program. Relays and RTUs speaking DNP3 are reachable from more places than anyone has drawn.
NERC CIPIEC 62351IEEE 1686
■Substation and relay access control
■DNP3 and IEC 61850 exposure across the WAN
■DER and inverter control integration
Typical topologyExposed path
L3.5 · DMZEMS DMZ
VENDOR VPN
L2 · HMIControl center HMI
L2 · SCADADistribution SCADA
L2 · HISTORIANPI historian
L1 · PLCSubstation gateway
L1 · RTUFeeder RTU
L1 · SAFETYProtective relays
L0 · PROCESSBreakers · transformers · DER · load
Where we start
