search
  |    Account Log-In/Register    |    Contact Us
Project 2016-02 Modifications to CIP Standards

Related Files

Status
A 45-day formal comment period for CIP-012-1 - Cyber Security Control Center Communication Networks is open through 8 p.m. Eastern, Monday, September 11, 2017. Ballot pools are being formed through 8 p.m. Eastern, Friday, August 25, 2017. An initial ballot for the standard and a non-binding poll of the Violation Risk Factors (VRFs) and Violation Severity Levels (VSLs) will be conducted September 1-11, 2017.

The draft Reliability Standard Audit Worksheet is posted for comment through 8 p.m. Eastern, Monday, September 11, 2017.

Two simultaneous 30-day informal comment periods on the proposed definition of "Control Center" and the Technical Rationale and Justification for CIP-012-1 - Cyber Security - Control Center Communication Networks are open through 8 p.m. Eastern, Tuesday, September 12, 2017. The drafting team will review all responses received during the informal comment periods and determine the next steps of the project.

Background
The Version 5 Transition Advisory Group (V5 TAG) transferred issues to the Version 5 SDT that were identified during the industry transition to implementation of the Version 5 CIP Standards. Specifically, the issues that the SDT will address are:

·         Cyber Asset and BES Cyber Asset Definitions
·         Network and Externally Accessible Devices
·         Transmission Owner (TO) Control Centers Performing Transmission Operator (TOP) Obligations
·         Virtualization
 
On January 21, 2016, FERC issued Order No. 822 Revised Critical Infrastructure Protection Reliability Standards. In this order, FERC approved revisions to version 5 of the CIP standards and also directed that NERC address each of the Order 822 directives by developing modifications to requirements in CIP standards and the definition of Low Impact External Routable Connectivity (LERC), or the SDT shall develop an equally efficient and effective alternative. To address concerns identified in Order 822, the Commission directed the following:

·        Develop modifications to the CIP Reliability Standards to provide mandatory protection for transient devices used at Low Impact BES Cyber Systems based on the risk posed to bulk electric system reliability.
·        Develop modifications to the CIP Reliability Standards to require responsible entities to implement controls to protect, at a minimum, communication links and sensitive bulk electric system data communicated between bulk electric system Control Centers in a manner that is appropriately tailored to address the risks posed to the bulk electric system by the assets being protected (i.e., high, medium, or low impact).
·        Develop a modification to provide the needed clarity, within one year of the effective date of this Final Rule, to the LERC definition consistent with the commentary in the Guidelines and Technical Basis section of CIP-003-6.
 

Standard(s) Affected CIP-002-5.1, CIP-003-6, CIP-004-6, CIP-005-5, CIP-006-6, CIP-007-6, CIP-008-5, CIP-009-6, CIP-010-2, CIP-011-2

Purpose/Industry Need
The SDT will modify the CIP family of standards (or develop an equally efficient and effective alternative) to:

        Address issues identified by the CIP V5 TAG;
        Address FERC directives contained in Order 822; and
        Address requests for interpretations as directed by the NERC Standards
 
Draft Actions Dates Results Consideration of Comments

Proposed Definition of Control Center

Technical Rationale and Justification for CIP-012-1

Supporting Materials

Unofficial Comment Form - Proposed Definition of Control Center

Unofficial Comment Form - Technical Rationale and Justification for CIP-012-1


Comment Periods

Info​

Submit Comments

08/14/17 - 09/12/17

Draft 1

CIP-012-1

Implementation Plan

Supporting Materials

Unofficial Comment Form (Word)

Consideration of Issues and Directives

VRF/VSL Justification








Draft Reliability Standard Audit Worksheet (RSAW)



​Initial Ballot and Non-binding Poll

Info

Vote


09/01/17 - 09/11/17

Comment Period

Info

Submit Comments


07/27/17 - 09/11/17

Join Ballot Pools


07/27/17 - 08/25/17


Info

Send RSAW feedback to:
RSAWfeedback@nerc.net


08/17/17 - 09/11/17

TOCC White Paper

Supporting Materials

Unofficial Comment Form (Word)



Comment Period

Info

Submit Comments
​03/14/17 - 04/11/17
Comments Received

Virtualization/Unofficial Comment Form


Comment Period

Info

Submit Comments

​03/14/17 - 04/11/17
Comments Received

Communication Networks/Unofficial Comment Form


Comment Period

Info

Submit Comments


02/10/17 - 03/13/17

Comments Received​

CIP Exceptional Circumstances/Unofficial Comment Form


Comment Period

Info

Submit Comments


02/10/17 - 03/13/17

Comments Received​

Final Draft

CIP-003-7(i)
Clean | Redline to Last Posted

Implementation Plan
Clean | Redline to Last Posted

Definition of Terms Used in Standards (TCA and Removable Media)
Clean | Redline to Last Posted

​Final Ballots

Info

Vote
​01/30/17 - 02/08/17

Ballot Results

CIP-003-7(i)

Implementation Plan

TCA Definition

Removable Media Definition


Draft 1

CIP-003-7(i)
Clean | Redline to Last Approved | Redline to CIP-003-7

Implementation Plan

Definition of Terms Used in Standards (TCA and Removable Media)



Supporting Documents

Unofficial Comment Form (Word)


VRF/VSL Justification


Consideration of Issues and Directives



















CIP-003-7(i)

Draft Reliability Standard Audit Worksheet (RSAW)
Updated Clean | Redline to CIP-003-6


Initial Ballots and Non-binding Poll

Updated Info

Info

Vote

​01/16/17 - 01/25/17
(The Non-binding Poll was extended to 01/26/17
to meet quorum) 

Ballot Results​

CIP-003-7(i)

Implementation Plan

TCA Definition

Removable Media Definition

Non-binding Poll


Comment Period

Info

Submit Comments


​12/12/16 - 01/25/17​

​Comments Received

Consideration of Comments

Join Ballot Pools

The existing CIP-003-7 (LERC) ballot pool was used for all of the ballots associated with this portion of the project. The ballot pools have been re-opened to allow stakeholders to join if they are not existing members.

​12/12/16 - 01/10/17

Updated Info

Send RSAW feedback to:


RSAWfeedback@nerc.net


12/27/16 - 01/25/17

Updated RSAW posted January 20, 2017

Final Draft

CIP-003-7
Clean | Redline to Last Posted

Implentation Plan
Clean | Redline to Last Posted


Final Ballots

Info

Vote

12/09/16 - 12/19/16​

​Ballot Results

CIP-003-7

Implementation Plan

CIP-003-TCA
Clean | Redline to CIP-003-6

TCA Implementation Plan

Supporting Documents

Unofficial Comment Form (Word)

TCA Consideration of Issues and Directives

TCA VRF and VSL Justification

TCA Definition



Informal Comment Period

Info

Submit Comments​

​11/01/16 - 11/18/16
Comments Received​
Draft 2

CIP-003-7
Clean | Redline to Last Posted | Redline to Last Approved
 
Implementation Plan
Clean | Redline to Last Posted
 
Supporting Documents
 
Unofficial Comment Form (Word)

VRF and VSL Justification
Clean | Redline to Last Posted


Consideration of Issues and Directives
Clean | Redline to Last Posted





CIP-003-7
Draft
Reliability Standard Audit Worksheet (RSAW)
Clean | Redline



Additional Ballots and Non-binding Poll

Updated Info

Info

Vote


11/23/16 - 12/05/16​​
​Ballot Results

CIP-003-7

Implementation Plan

Non-binding Poll

Comment Period

Info

Submit Comments


10/21/16 - 12/05/16​ ​Comments Received ​Consideration of Comments




Info

Send RSAW feedback to:


RSAWfeedback@nerc.net



11/04/16 - 12/05/16
Draft 1

Definition of Term(s) Used in Standards

CleanRedline
 
 
Supporting Documents
 


  
 


Draft CIP-003-7 RSAW
  Clean | ​Redline




Initial Ballots and Non-binding Poll

Updated Info

Info

Vote


​08/26/16 - 09/06/16

​Ballot Results

CIP-003-7

Implemenation Plan

LERC and its Definition

Non-binding Poll


Comment Period

Info

Vote


​07/21/16 - 09/06/16

Comments Received​​

Consideration of Comments​

Join Ballot Pools


07/21/16 - 08/19/16


Info

Send RSAW Feedback to:

RSAWfeedback@nerc.net



08/10/16 - 09/06/16

The Standards Committee accepted the Standards Authorization Request on July 20, 2016


Comment Period

Info

Submit Comments​

​06/01/16 - 06/30/16
​Comments Received

Standards Authorization Request

Supporting Materials

Unofficial Comment Form (Word)

CIP Version 5 Transition Advisory Group
Issues for Consideration



​Comment Period

Info

Submit Comments
​03/23/16 - 04/21/16 ​Comments Received
 
Supplemental Standard Drafting Team Nominations

Supporting Materials

Unofficial Nomination Form (Word)
 
Nomination Period

Info

Submit Nominations
03/10/16 - 03/23/16
 

 

 
 

home | account log-in/register | legal and privacy/trademark policy | site map | careers | contact us

Atlanta Office | 3353 Peachtree Road, NE Suite 600 North Tower, Atlanta, GA 30326 | 404-446-2560
Washington Office | 1325 G Street, NW Suite 600, Washington, DC 20005| 202-400-3000

Copyright 2016 North American Electric Reliability Corporation. All rights reserved.