Newsroom  •  Site Map  •  Contact NERC

  
Advanced Search
 
About NERC Standards Compliance Assessments Events Analysis Programs  


Project 2008-06
Cyber Security Order 706


Related Files

Activity Status
Phase II  Informal Comment Period Now Open Until 02/12/10
Phase I
Violation Risk Factors (for CIP-003-2 and CIP-006-2) and
Violation Severity Levels (CIP-002-2 through CIP-009-2)

Pending NERC Board of Trustees approval.

Phase I
Standards (CIP-002-2 through CIP-009-2)
Approved by NERC Board of Trustees and pending regulatory approval.
Standard Authorization Request (SAR) and Drafting Team Nominations  Complete 

Purpose/Industry Need:
This set of revisions in this project includes:

  • Modifying the standards so they conform to the latest approved versions of the ERO Rules of Procedure as outlined in the Standard Review Guidelines identified in Attachment 1.
  • Addressing the directives issued by FERC, in Order 706 relative to the approved Cyber Security Standards CIP-002-1 through CIP-009-1. Refer to http://www.ferc.gov/whats-new/comm-meet/2008/011708/E-2.pdf the complete text of the final order. Specific requirements from the Order are identified in Attachment 2.
    –  Emphasis on Order 706 directive for NERC to address revisions to the CIP standards considering applicable feature of the NIST Security Risk Management Framework among other resources.
  • Incorporating clarifications from the Interpretation of CIP-006-1 Requirement 1.1.

NOTE: Additional issues identified by stakeholders during the posting of this SAR are listed in a supplementary SAR.  The supplementary SAR will be posted for industry comment, and if supported by stakeholders, will be appended to this SAR.


All comments should be forwarded to sarcomm@nerc.net.  
Questions?  Contact Lauren Koller - lauren.koller@nerc.net or 609-452-8060.