NERC CIP Standards

Critical Infrastructure Protection (CIP) involves protection of vital physical and Cyber Systems in order to preserve the physical and economic security of the electrical grid. NAES facilitates compliance with CIP-002 through CIP-011 for Low, Medium, and High Impact facilities and cyber systems. Protection of Bulk Electric System critical assets ranks among our highest priorities at NAES. We help you ensure compliance with NERC CIP Standards in all six NERC Reliability Regions, providing complete oversight of your CIP compliance program as well as consulting services, training, and audit preparation.

Contact

NAES Corporation Michiko Sell Photo

Michiko

Sr. NERC Reliability Specialists

Contact Michiko

More Coming Soon

Training

An essential element of all good NERC CIP programs is training. NAES NERC Services has developed a CIP 101 training program, covering CIP & Cyber Security for operators with any level of experience. In addition, NAES offers annual Operator Training that traverses both Ops and Planning and CIP requirements to ensure that your Operators have the tools they need to appropriately respond to events as they arise.

More Coming Soon

Training

An essential element of all good NERC CIP programs is training. NAES NERC Services has developed a CIP 101 training program, covering CIP & Cyber Security for operators with any level of experience. In addition, NAES offers annual Operator Training that traverses both Ops and Planning and CIP requirements to ensure that your Operators have the tools they need to appropriately respond to events as they arise.

Electronic Access Controls Evaluation

Now Required

The NAES NERC Team can assist power plant owners and operators in evaluating electronic access points at their facilities in order to show compliance with NERC standard  CIP-003-7, now CIP-003-8.  Our NERC cyber security experts utilize the Network Perceptions NPView Software to conduct the evaluation. This is the same tool used by all the NERC Regional Entities to evaluate system configurations and firewall rules during NERC audits. This service offering ensures that your facility will be made aware of potential security risks associated with your existing system configuration. NAES can assist you with addressing any identified issues.

The NERC Cyber Security Experts will:

  • Evaluate firewall rules – including the level of risk associated with each rule
  • Populate an Access Control List
  • Develop a high level Network Topology Drawing, provided in Visio
  •  Conduct a Configuration Analysis of BCS connectivity to determine if the BCS is appropriately protected
  • Train all employees on controls and requirements

Optional Add-Ons:

  • Physical walk-down of plant Cyber Assets
  • Assistance with Inventory & Development of a BES Cyber Asset List
  • Assistance with Identification and Classification of BES Cyber Systems

 

For more information, contact our team.

Contact Our Team Today

Network Perception Case Study

Network Perception