The Critical Infrastructure Protection Committee (CIPC) is tasked, by its Charter, to “Develop, periodically review, and revise (as appropriate) security guidelines. Issue guidelines in accordance with the process described in Appendix 1.”

The Security Guidelines page offers you the opportunity to keep track of all proposed new and updated security guidelines being developed by the CIPC. The development process was approved by CIPC in June 2008 and incorporates the procedures adopted by all the NERC technical committees. Click here to see a diagram of the overall process and the how other NERC committees and the public can participate.

Listed below are the drafts of (new or being updated) guidelines currently available for comments.  The listings below includes the formatted draft and a redline comparison.  The working documents can be found in the ESISAC library. 

The Security Guideline Process includes two key steps in the process which are:

1. 30-day comment period (Step 9) within the sponsoring committee (CIPC).

2. 45-day public comment period (Step 12).  

NERC welcomes and appreciates your comments on these documents.  Comments on the drafts are to be submitted to sgcomments@nerc.net.