CIP-005-7 and CIP-007-6 OT Firewall Infrastructure and Compliance Assessment

Lakeland Electric (“LAK”) operates critical infrastructure that requires robust cybersecurity measures. The Energy Management System (EMS) is vital to the operation, reliability, and safety of our services. Lakeland Electric is committed to ensuring the security and reliability of its cyber assets.

General information about Lakeland Electric:

1. LAK is a vertically integrated municipal electric utility that is owned and operated by the City of Lakeland (“City”). LAK serves approximately 256 square miles located entirely within Polk County, Florida.
2. LAK’s transmission system consists of approximately 28 circuit miles of 230kV lines and approximately 135 circuit miles of 69kV sub-transmission lines. LAK has 8 synchronous tie lines with 3 different utilities, Duke Energy Florida (2-230 kV ties), Tampa Electric Company (2-230 kV ties and 3-69 kV ties), and Orlando Utilities Commission (1-230 kV tie). LAK owns and operates its own generating units.
3. Regarding LAK’s facilities, LAK has two control centers that are rated as medium impact. LAK has seven BES substations and one generating unit that are rated as low impact. LAK does not have any facilities that are rated as high impact.
4. LAK identifies its Energy Management System (EMS) as the “OT network” with respect to this RFP. The Energy Management System is classified as a single Cyber System. There are approximately 151 in-scope cyber assets, 145 of which have External Routable Connectivity contained within an extended Electronic Security Perimeter . The EMS is protected by an extended Electronic Security Perimeter that is created by three (3) physical cyber assets (firewall) operating as a cluster that is managed by a virtual firewall management server.