webTrans: OATI Implements Enhanced Supply Chain Controls
Nov 21, 2016
OATI has earned a strong reputation for security and reliability in the energy industry for its continuous commitment to compliance with standards established for industry participants. OATI continues to voluntarily adopt and integrate these best business practices. OATI has identified an opportunity to enhance our process for system and services acquisitions. This process will leverage a common set of security specific criteria in examining the acquisition of new security software and hardware for implementation into the OATI Private Cloud environment.
The new process includes a cross-functional security assessment plan that will be used for requesting, reviewing, and implementing new services with major security implications. The services and acquisition process and associated controls are designed to limit and control the impact on OATI's security infrastructure by the addition or modification of any new hardware or software that is introduced. In implementing this new plan, OATI drew influence from FedRAMP, NERC CIP, and other industry best practices related to supply chain security.
OATI believes these enhanced controls will complement previous efforts and will serve as an added layer in OATI’s overall security.