D.C. – At its monthly open meeting,
the Federal Energy Regulatory Commission (FERC) took action on two key
reliability items. FERC released a notice
of inquiry (NOI) on virtualization and cloud computing services. Separately,
FERC ordered NERC to submit an informational filing on the schedule and plans
for open standard development projects on these two topics.
NOI focuses on the benefits and risks associated with virtualization and cloud
computing for use in operating the Bulk Electric System (BES). It seeks
comments on potential vulnerabilities of moving sensitive data to the cloud, methods
to mitigate them and whether barriers to the use of these technologies exist in
Critical Infrastructure Protection (CIP) Reliability.
informational filing will include the schedule and plans for two NERC standard
development projects, Project 2016-02 and Project 2019-02. NERC launched the
standard development Project 2016-02 in response to Order No. 822. In addition
to having addressed directives identified in Order No. 822, Project 2016-02 is
now developing modifications to address stakeholder-identified issues,
including clarifying the use of virtualization technologies.
2019-02, initiated based on stakeholder-identified issues, addresses BES Cyber
System Information Access Management. The proposed modifications seek to enhance
the CIP standards by providing a secure path toward the use of third‐party data
storage and analysis systems and by clarifying the protections expected when
utilizing cloud services.
will continue to work with FERC and stakeholders on Reliability Standards that
advance the security of the bulk power system.
FERC Press Release
home | account log-in/register | legal and privacy/trademark policy | site map | careers | contact us
Atlanta Office | 3353 Peachtree Road NE, Suite 600 North Tower, Atlanta, GA 30326 | 404-446-2560 Washington Office | 1325 G Street NW, Suite 600, Washington, DC 20005| 202-400-3000
Copyright 2020 North American Electric Reliability Corporation. All rights reserved.