Security Events Management - GE MiCOM P40 Technical Manual

Chapter 22 - Cyber-Security
The following protocols can be disabled:
IEC 61850 (IEC61850 setting)
●
● DNP3 Over Ethernet (DNP3 OE setting)
Courier Tunnelling (Courier Tunnel setting)
●
Note:
If any of these protocols are enabled or disabled, the Ethernet card will reboot.
4.7

SECURITY EVENTS MANAGEMENT

To implement NERC-compliant cyber-security, a range of Event records need to be generated. These log security
issues such as the entry of a non-NERC-compliant password, or the selection of a non-NERC-compliant default
display.
Security event values
Event Value
PASSWORD LEVEL UNLOCKED
PASSWORD LEVEL RESET
PASSWORD SET BLANK
PASSWORD SET NON-COMPLIANT
PASSWORD MODIFIED
PASSWORD ENTRY BLOCKED
PASSWORD ENTRY UNBLOCKED
INVALID PASSWORD ENTERED
PASSWORD EXPIRED
PASSWORD ENTERED WHILE BLOCKED
RECOVERY PASSWORD ENTERED
IED SECURITY CODE READ
IED SECURITY CODE TIMER EXPIRED
PORT DISABLED
PORT ENABLED
DEF. DISPLAY NOT NERC COMPLIANT
PSL SETTINGS DOWNLOADED
590
USER LOGGED IN
ON {int} LEVEL {n}
USER LOGGED OUT
ON {int} LEVEL {n}
P/WORD SET BLANK
BY {int} LEVEL {p}
P/WORD NOT-NERC
BY {int} LEVEL {p}
PASSWORD CHANGED
BY {int} LEVEL {p}
PASSWORD BLOCKED
ON {int}
P/WORD UNBLOCKED
ON {int}
INV P/W ENTERED
ON <int}
P/WORD EXPIRED
ON {int}
P/W ENT WHEN BLK
ON {int}
RCVY P/W ENTERED
ON {int}
IED SEC CODE RD
ON {int}
IED SEC CODE EXP
-
PORT DISABLED
BY {int} PORT {prt}
PORT ENABLED
BY {int} PORT {prt}
DEF DSP NOT-NERC
PSL STNG D/LOAD
BY {int} GROUP {grp}
Display
P446SV-TM-EN-1
P446SV