NERC CIP
What is NERC CIP?
North American Electric Reliability Corporation Critical Infrastructure Protection standards that establish cybersecurity requirements for the bulk electric system.
Terms that appear alongside nerc cip
Each of these is named in at least one of the same controls as nerc cip. The number is how many controls name both.
- nist 8 shared controls
- nist sp 800 53 6 shared controls
- iec 62443 6 shared controls
- authentication 5 shared controls
- compliance 4 shared controls
- access control 3 shared controls
- cybersecurity 3 shared controls
- audit trail 3 shared controls
Frameworks that govern nerc cip
What the standards actually require on nerc cip
Requirements naming nerc cip across 4 standards, quoted from the control text.
The cybersecurity program strategy identifies the compliance requirements the program must meet, for example NERC CIP, the TSA pipeline security guidelines, PCI DSS, ISO standards or DoD CMMC.
australian-energy-sector-cyber-security-framework-aescsf::PROGRAM-1g · PROGRAM-1g: Strategy identifies compliance requirements →The technical report starts from the two parallel infrastructures, the electrical grid and the information infrastructure that automates it, and the specifics that distinguish power system security from office IT: constrained resources, asymmetric message-orie...
iec-62351-power-systems-communication-security::10:4 · Part 10, clause 4: power system specifics, related standardization and the TC 57 reference architecture →A network device placed on a zone boundary must monitor and control communications at that boundary to enforce the zones and conduits model; RE 1 deny by default and allow by exception;
iec-62443::NDR 5.2 · Zone boundary protection (network device) →Security Dimension 7 Availability per X.805 Clause 6.7: Availability means that events affecting the network do not stop authorized users from reaching the services, applications, information flows, stored information and network elements they are entitled to....
X805-Dim7-Availability-Network-Resources-Information-Authorized-Access-No-Service-Denial · ITU-T X.805 Security Dimension 7 - Availability + Network Resources + Information Accessible to Authorized Users + Denial-of-Service Prevention + Resilience + Redundancy + Disaster Recovery + Business Continuity + DDoS Mitigation →Questions people ask about nerc cip
What is NERC CIP?
Why is NERC CIP important for compliance?
Which compliance frameworks address NERC CIP?
Where can I learn more about NERC CIP?
See how NERC CIP applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.