Ok - I really am impressed by this accomplishment and want to know more details - Click Read More below.
This is a very insightful read. But, I have lots of questions about the process used by Southern Company during this project and the level of effort to complete the project. Southern's findings could genuinely benefit many others by posting their "Trusted Products" in a "Trust Registry" so that others that may be interested in buying these same products will know that Southern performed a risk assessment and made a determination about trustworthiness. This is how the electric industry can help smaller entities lacking cybersecurity expertise and resources, like Munis and Coops, benefit from the good work and findings of the big guys.
A "Trust Registry" can provide significant social welfare and benefits to smaller electric utilities that lack the cybersecurity skills and resources of the larger companies, like Southern Company.