U.S. energy infrastructure providers’ worst security vulnerability may be their employees. Security experts say lack of cooperation between IT security and grid operations workers is a problem. Security improvements are taking place, driven in part by compliance mandates such as the North American Electric Reliability Corp’s Critical Infrastructure Protection program. But it may take years to see measurable security gains in the grid sector, says one expert from Gartner Security Group, which serves grid industry security needs immediate attention to the threat of Stuxnet and Flame malware.”]

