SPSP Phase III Recruiting, Selecting, and Developing Secure Power Systems Professionals: Individual and Team Performance Guidelines
The pending retirement of significant numbers of power system experts and a continuing trend of increasing complexity in modern power systems prompted the U.S. Department of Energy (DOE) to establish the three-phase Secure Power Systems Professional (SPSP) project. The project developed resources for job definition and competency analysis along with tools to guide assessment and curriculum design and to help identify and develop required knowledge, skills, and abilities in technical and operational aspects of power systems cybersecurity. The Secure Power Systems Professional Phase III final report was released last year which an appendix of Individual and Team Performance Guidelines. This new report is that appendix broken out as a standalone document to assist utilities in recruiting and developing Secure Power Systems Professionals at their site. Individual/Team Performance Guidelines were developed for each of the four job roles: the secure power systems engineer, incident responder, intrusion analyst, and security operator. They enable an “at-a-glance” view of the multidisciplinary and collaborative nature of SPSP job roles, for which skill sets were studied and then mapped to stories of critical incidents or vignettes. This afforded an enumeration of tasks required of each job role to effectively perform responsibilities and to meet bestpractice goals for that operation. Assignment of these tasks among the job roles, either as an individual responsibility or a collaborative responsibility, was validated during a job performance model analysis. The analysis identified 13 master vignettes from the collection of critical incident stories, many of which shared a common set of job responsibilities and tasks that were grouped into four vignette categories according to the task requirement for effective response to each event.