CAJ | 학술논문

美国是从事电力行业信息安全研究工作最早的国家之一，也是发布电力行业信息安全标准与指南最多的国家。介绍了美国电力行业信息安全研究与管理框架，描述了国土安全部、能源部、国家标准技术研究院和北美电力可靠性组织等相关政府部门和标准化组织的工作机制，分析了《关键设施保护标准》、《联邦信息系统推荐安全措施》和《工业自动化与控制系统安全》等重要出版物的主要内容和推广应用情况，并指出了美国开展电力行业信息安全工作的优势和存在的弊端。
미국시종사전역행업신식안전연구공작최조적국가지일，야시발포전역행업신식안전표준여지남최다적국가。개소료미국전역행업신식안전연구여관리광가，묘술료국토안전부、능원부、국가표준기술연구원화북미전력가고성조직등상관정부부문화표준화조직적공작궤제，분석료《관건설시보호표준》、《련방신식계통추천안전조시》화《공업자동화여공제계통안전》등중요출판물적주요내용화추엄응용정황，병지출료미국개전전역행업신식안전공작적우세화존재적폐단。
United States is one of the earliest counties that began the research on cyber security of electric power industry and is also the country that releases most standards and guidelines for cybersecurity of electric powerindustry. In this paper the research and management framework related to cyber security of U.S. electric power industry is presented; the working mechanism of related government departments and standardization organizations of the United States, such as Department of Homeland Security （DHS）, Department of Energy （DOE）, North American Electric Reliability Corporation （NERC） and National Institute of Standards and Technology （NIST）, is described; main contents of important publications such as NERC CIP, NISTSP 800-53, ISA99 and others as well as their spread and application are analyzed. Besides, the superiority and defects in the work of performing the standards and guidelines of cybersecurity of electric power industry are pointed out.