A security architect for a regional energy utility is reviewing security mechanisms implemented across the smart grid infrastructure. Match each technical security control scenario on the left with the primary CIA Triad pillar or Non-Repudiation objective it satisfies on the right.
- Substation operators must authenticate using individual hardware tokens to generate asymmetric digital signatures on remote circuit breaker tripping commands, preventing engineers from claiming an unauthorized shutdown command originated elsewhere.Non-Repudiation
- Smart meter consumption telemetry transmitted over public wireless infrastructure is encrypted with AES-256-GCM to prevent unauthorized third parties from snooping on customer power usage patterns.Confidentiality
- Firmware images distributed to remote terminal units (RTUs) incorporate cryptographic hash trees (Merkle trees) to verify that code has not been altered or corrupted prior to installation.Integrity
- Control center supervisory networks employ redundant network paths, dual power supplies, and automatic failover clustering to ensure continuous operational visibility during hardware faults.Availability
Answer
The operator authentication control with asymmetric digital signatures matches Non-Repudiation. Encrypting smart meter telemetry with AES-256-GCM matches Confidentiality. Firmware hash tree verification matches Integrity. Redundant paths and failover clustering match Availability.
Each technical scenario corresponds to a foundational security objective: asymmetric signing of commands provides Non-Repudiation by uniquely binding actions to individual operators; payload encryption protects customer usage privacy under Confidentiality; cryptographic hashing verifies unauthorized code modifications under Integrity; and system redundancy maintains uninterrupted operational access under Availability.
Step-by-Step Solution
Key Concept
Core Security Goals (CIA Triad and Non-Repudiation)