Energy & electric grid · OT Security · Transmission Operations · CIP Compliance
Map cryptography between grid control centres and substations
Which operational links and devices can migrate, and which must be isolated until replacement?
Operational pain
Control networks mix modern IP links, serial gateways, vendor tunnels, engineering access, and devices with decades-long service life.
Trigger
NERC CIP assessment, control-centre refresh, or post-quantum infrastructure programme.
QNSI contribution
Connect the decision to a controlled security path
Record algorithms, certificates, keys, vendors, physical locations, owners, criticality, and observed evidence in QNSI.
Decision artifact
A control-path cryptographic asset register with replacement cohorts and documented compensating controls.
What still requires validation
The utility tests protection-system timing, vendor support, safety, recovery, approved change windows, and CIP applicability.
External problem context
Primary sources
These sources establish the external requirement or risk context. They do not endorse HEOSSI or prove that QNSI completed this scenario.
Evidence boundary
What this page does—and does not—prove
This is a product evaluation pattern, not a customer case study, certification, legal opinion, regulator endorsement, or claim that a production deployment completed the described work.