IEC 62351 - Power Systems Communication Security 90-3:5: Part 90-3, clause 5: information collection, filtering and processing (IT and OT elements, SNMP agents, IDS and IPS probes, central NSM platforms, log collection, log agents, normalization, SIEM, other sources)

Monitoring of converged IT and OT networks collects from the IEDs, PLCs and RTUs, substation controllers, gateways, HMIs, computers and servers, switches, routers and firewalls, VPN tunnels and increasingly virtualised and cloud components, through SNMP agents (many MIB versions needing a manager that normalises v2c and v3 variants), intrusion detection and prevention probes alerting a SIEM, central network and system management platforms, and a log management architecture of log agents, normalisation and SIEM, plus other relevant data sources.