Suggestions
Andrew Bochman ๐บ๐ฒ๐บ๐ฆ
Not an AI. INLer & Atlantic Council Global Energy Center Non Resident Senior Fellow | Speaker, Author, Advisor
Andrew Bochman is a Non-Resident Senior Fellow at the Atlantic Council's Global Energy Center, where he focuses on protecting critical energy and infrastructure systems from cyber and climate risks. He is also the Senior Grid Strategist for National and Homeland Security at the Idaho National Laboratory (INL). In these roles, Bochman provides strategic guidance on grid security, resilience, and infrastructure protection to both U.S. and international government and industry leaders.124
Professional Background
- Idaho National Laboratory (2014โPresent): Senior Grid Strategist, focusing on the intersection of grid security and climate resilience.
- Atlantic Council (2021โPresent): Non-Resident Senior Fellow at the Global Energy Center.
- Previous Roles:
- Senior Advisor at The Chertoff Group.
- Global Energy & Utilities Security Lead at IBM.
- Communications Officer in the U.S. Air Force.
Education
- United States Air Force Academy: Bachelor of Science in Engineering.
- Harvard University: Master of Arts in Environmental Management.
Publications and Contributions
- Co-authored Countering Cyber Sabotage: Introducing Consequence-based Cyber-Informed Engineering (2021).
- Authored articles addressing energy infrastructure resilience and cybersecurity.24
Recognition
Highlights
Last month AFCOM* published a firewalled piece: "As Temperatures Rise, Data Centers Must Beat the Heat." It's a quite thorough and well researched piece, and while I can't link to it, I will share a couple of the statements extracted from your correspondent as well as a link to the trade group/publisher where for a fee you can access all their pubs in this space.
Here we go:
(1) "The codes and standards to which data centers were designed by architects, construction companies and engineers are all backwards looking to a more stable time when [temperatures] were more predictable and less dynamic."
Call to Action: We need rapidly and fully revised standards and/or builders with the foresight to design for reliable ops in a warmer world. Engineers should think of this as a climate risk safety factor.
And a second one, with a touch of spice:
(2) "When data center owners and operators and investors get real, they're going to have to perform vulnerability assessments across all of their current fleets."
Call to Action: Get started on these stat, and when the findings are that you're going to need to do major HVAC retrofits on a significant percentage of your DCs, either raise the money and get them modernized, or shut 'em down and build all new ones to better specs (see quote and CTA #1).
H/T author Danny Bradbury
David Mussington Ph.D. CISSP Rob Denaburg Sunny Wescott Ryan Donaghy, Ph.D. Danielle J.
- One could be forgiven for assuming AFCOM is a military org. Rather, it stands for the Association for Computer Operations Management, founded in 1980. Its current tagline is "Advancing IT and Data Center Infrastructure Professionals."
Friend & OT security colleague Andrew Ginter has a new piece out worth your time if you value life, liberty and the pursuit of enough energy to keep civilization running. He says:
๐"Most attacks causing [operational] shutdowns are ransomware.... Worse, the most sophisticated ransomware groups are buying and selling attack tools from and to nation states โ the tools and techniques used by the two kinds of threat actors are becoming indistinguishable."
I too have been noting that trend. And I โฅ this part:
๐"Imagine you work 8-hours a day inside the kill radius of a worst-case [refinery] cracker explosion. How would you prefer to be protected from a cyber-attack that over-heats the furnace under one of your crackers? Would you prefer a mechanical, spring-loaded over-pressure relief valve that, if the cracker over-pressurizes, is forced open mechanically to route hot hydrocarbons to a flare stack? Or would you prefer a longer password on the computer controlling the furnace?"
Nice said Andrew and nuff said. CIE is a better way, and someday will be fully codified in standards as the right way to design and build operational systems. Thanks to your hard work and many of the folks below:
Virginia Wright Cheri Caddy Samantha Ravich Paul Stockton Mark Weatherford Stephanie H. Johnson, Ph.D. Andrew Ohrt, PE, CISSP Tony Turner Frank Cilluffo Marcus H. Sachs, P.E. Peter Behr Christian Vasquez Mike Farrell Dr. Georgianna (George) S.
