From: Doug Compere Sent: Monday, June 7, 2021 2:22 PM To: ElectricSystemEO Cc: David Gencarelli Subject: [EXTERNAL] Response to Federal Register RFI 86 FR 21309 Attention: Michael Coe, Director, Energy Resilience Division of the Office of Electricity Please accept the attached Solution Brief for consideration and formal registration in response to Document Citation: 86 FR 21309 Document Number 2021-08482. About BlastWave: BlastWave’s innovation in cyber defense is ideal for IIOT environments especially for Oil Equipment, Services & Distribution. BlastWave offers unparalleled protection for Operational Technology (OT) networks. BlastWave is designed with a unique approach is based on: • Invisibility of Infrastructure, rather than traditional end point isolation (or PSPF w/subnetting), rendering devices undetectable to unauthorized users, • Edge-to-Edge secure mesh connection authenticated to a secure cloud managed policy, rather than merely a network topology map with end point encryption, • Users are multi-factor authenticated to the cloud orchestrated groups and policies, rather than concentrator or gateway switch, • Zero publicly exposed ports, rather than data flow through a VPN Server open to the internet. • Overlay deployment for augmented cyber security protection implementation. Why BlastWave: • Invisibility of Infrastructure to unauthorized users rendering devices undetectable, • Multi-factor authentication eliminating all credential theft and vulnerabilities, • End-to-End security, rather than network perimeter access, and is immune from Man-in-the-Middle (MitM) and insider threats, • Greater than 80% reduction cyber security incidents reported with customer Security Information & Event Management (SIEM) system. BlastWave SecOps benefits: • 100% software, not hardware-based deployment, • Zero latency overhead and eliminates concentrator bandwidth bottlenecks, • Compliant with both simple and complex infrastructure topologies, • Improved operational efficiency for NOC and SOC environments. • Augmented cyber security infrastructure, designed for Overlay deployment to avoid disruptive “rip and replace” processes, • Cloud Orchestration simplifies network equipment management by replacing most ACL with cloud managed policies. BlastWave addresses NIST framework first principle “Protect” in a unique way. BlastWave innovation introduces a new method that: • Block’s malware “call home” otherwise known as beaconing, • Block’s malware interaction to answer the “Command & Control (C&C), • Block’s malware data exfiltration, • Denies insiders ability to discover other connected devices, • Is immune to attacks demonstrated in the data theft of SolarWinds, Hafnium and Darkside incidents, • Eliminates security gaps that offer access zones, by converting into an end-to-end secure mesh connection, Kind Regards, Doug Compere phone: (415) 310-0810 email: doug@blastwave.io Video Overview