Erica Furlan details Burlington Electric's cybersecurity advancements and user training

In a recent meeting of the Vermont House Energy and Digital Infrastructure Committee, significant discussions centered around cybersecurity measures implemented by Burlington Electric Department (BED). Erica Furlan, the department's IT director, provided insights into the evolving landscape of cyber threats and the proactive steps taken to enhance security.

Furlan highlighted the substantial upgrades made over the past three years, including improved software, operations, and user training. These enhancements, while effective, have come at a considerable cost as the department strives to keep pace with increasingly sophisticated cyber threats. She noted a marked shift in the nature of phishing attacks, which have transitioned from generic to highly targeted attempts that exploit organizational knowledge.

A key development in BED's cybersecurity strategy was the establishment of a dedicated cybersecurity engineer position, which has significantly bolstered the department's ability to monitor and respond to potential threats. Additionally, the department has partnered with a third-party Security Operations Center (SOC) to provide 24/7 monitoring of their systems.

Furlan also shared the success of a Department of Energy-funded operational technology cyber training course, which brought together utilities from Vermont, Maine, and Massachusetts. This initiative not only provided valuable training but also fostered networking among utility professionals.

In a notable shift, BED retired its traditional VPN in favor of a zero-trust solution, responding to alarming attempts to breach their systems. Furlan emphasized the ongoing nature of cybersecurity work, acknowledging that as threats evolve, so too must the strategies to combat them.

The meeting underscored the critical importance of cybersecurity in the energy sector, particularly as utilities face increasing risks from cyberattacks. As the conversation continues, the committee will likely explore further measures to enhance the resilience of Vermont's energy infrastructure against these persistent threats.