Security Events Management - GE MiCOM P40 Agile Technical Manual

Chapter 19 - Cyber-Security
4.7

SECURITY EVENTS MANAGEMENT

To implement NERC-compliant cyber-security, a range of Event records need to be generated. These log security
issues such as the entry of a non-NERC-compliant password, or the selection of a non-NERC-compliant default
display.
Security event values
Event Value
PASSWORD LEVEL UNLOCKED
PASSWORD LEVEL RESET
PASSWORD SET BLANK
PASSWORD SET NON-COMPLIANT
PASSWORD MODIFIED
PASSWORD ENTRY BLOCKED
PASSWORD ENTRY UNBLOCKED
INVALID PASSWORD ENTERED
PASSWORD EXPIRED
PASSWORD ENTERED WHILE BLOCKED
RECOVERY PASSWORD ENTERED
IED SECURITY CODE READ
IED SECURITY CODE TIMER EXPIRED
PORT DISABLED
PORT ENABLED
DEF. DISPLAY NOT NERC COMPLIANT
PSL SETTINGS DOWNLOADED
DNP SETTINGS DOWNLOADED
TRACE DATA DOWNLOADED
IEC61850 CONFIG DOWNLOADED
USER CURVES DOWNLOADED
470
USER LOGGED IN
ON {int} LEVEL {n}
USER LOGGED OUT
ON {int} LEVEL {n}
P/WORD SET BLANK
BY {int} LEVEL {p}
P/WORD NOT-NERC
BY {int} LEVEL {p}
PASSWORD CHANGED
BY {int} LEVEL {p}
PASSWORD BLOCKED
ON {int}
P/WORD UNBLOCKED
ON {int}
INV P/W ENTERED
ON <int}
P/WORD EXPIRED
ON {int}
P/W ENT WHEN BLK
ON {int}
RCVY P/W ENTERED
ON {int}
IED SEC CODE RD
ON {int}
IED SEC CODE EXP
-
PORT DISABLED
BY {int} PORT {prt}
PORT ENABLED
BY {int} PORT {prt}
DEF DSP NOT-NERC
PSL STNG D/LOAD
BY {int} GROUP {grp}
DNP STNG D/LOAD
BY {int}
TRACE DAT D/LOAD
BY {int}
IED CONFG D/LOAD
BY {int}
USER CRV D/LOAD
BY {int} GROUP {crv}
Display
P14xEd1-TM-EN-1
P14x