Project 2019-02 BES Cyber System Information Access Management

​​​​​​Related Files

Status
A 45-day comment period is open through 8 p.m. Eastern, Monday, May 10, 2021 for the following:

-CIP-004-X - Cyber Security - Personnel & Training

-CIP-011-X - Cyber Security - Information Protection

-Implementation Plan

Due to projects 2019-02 BES Cyber System Information Access Management (BCSI) and 2016-02 Modification to CIP Standards (2016-02) both modifying CIP-004 and CIP-011, an “-X" has been added in place of the version numbers for the BCSI and a “-Y" for the 2016-02 standards. Once both projects are completed, they will be combined together with one version, prior to submission to the NERC Board.

​The standard drafting team's considerations of the responses received from the previous comment period are reflected in these drafts of the standards. An additional ballot and associated Violation Risk Factors (VRFs) and Violation Severity Levels (VSLs) non-binding poll will be conducted April 30 – May 10, 2021​.

Background
This initiative enhances BES reliability by creating increased choice, greater flexibility, higher availability, and reduced‐cost options for entities to manage their BES Cyber System Information, by providing a secure path towards utilization of modern third‐party data storage and analysis systems. In addition, the proposed project would clarify the protections expected when utilizing third‐party solutions (e.g., cloud services).

Standard(s) Affected CIP-004-6 - Cyber Security - Personnel & Training | CIP-011-2 - Cyber Security - Information Protection

Purpose/Industry Need
The purpose of this project is to clarify the CIP requirements related to BES Cyber System Information (BCSI) access, to allow for alternative methods, such as encryption, to be utilized in the protection of BCSI.

DraftActionsDatesResultsConsideration of Comments

Draft 3

CIP-004-X
Clean | Redline to Last Posted | Redline to Last Approved

CIP-011-X
Clean | Redline to Last Posted | Redline to Last Approved

Implementation Plan


Supporting Documents

Unofficial Comment Form (Word)

Technical Rationale
CIP-004-X

CIP-011-X​

Implementation Guidance
CIP-004-X

CIP-011-X (coming soon)

VRF/VSL Justifications​​​
CIP-004-X

CIP-011-X

Mapping Document
CIP-004-X

​CIP-011-X​







Additional Ballot and Non-binding Poll

Info

Vote










04/30/21 - 05/10/21



Comment Period

Info

Submit Comments







03/25/21 - 05/10/21
​​

Draft 2

CIP-004-7
Clean | Redline to Approved | Redline to Last Posted


CIP-011-3
Clean | Redline to Approved | Redline to Last Posted 


Implementation Plan
Clean | Redline

Supporting Materials

 Unofficial Comment Form (Word)


Technical Rationale

CIP-004-7

CIP-011-3 *updated

VRF/VSL Justifications

CIP-004-7

CIP-011-3


Mapping Documents

CIP-004-7

CIP-011-3

 

 

 

Additional Ballot

Info

Vote

 

 

 

09/11/20– 09/21/20​​

 

Ballot Results

CIP-004-7

CIP-011-3

Implementation Plan

 

Non-Binding Poll Results

CIP-004-7

CIP-011-3

 

 

 

 


 

 

Comment Period

Info

Submit Comments

 

 

 

08/06/20– 09/21/20​​

 


 

Comments Received​





Draft 1

CIP-004-7
Clean | Redline *updated


CIP-011-3
Clean | Redline


Implementation Plan

Supporting Materials

 Unofficial Comment Form (Word)


Technical Rationale

CIP-004-7

CIP-011-3

VRF/VSL Justifications

CIP-004-7

CIP-011-3


Mapping Documents

CIP-004-7

CIP-011-3

 

Initial Ballot

Info

Vote

 

 

 

 


01/24/20– 02/03/20

  

Ballot Results

CIP-004-7
CIP-011-3
Implementation Plan

 

Non-binding Poll Results

 CIP-004-7
 CIP-011-3

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 



 

Consideration of Comments

 

 

Comment Period

Info

Submit Comments

 

 


12/20/19– 02/03/20

 


 

Comments Received

 

 

Join Ballot Pools

 

 

12/20/19– 01/20/20

​​
Standard Authorization Request (SAR)
Clean | Redline


The Standards Committee accepted the corrected SAR on November 20, 201
9​
Supplemental Drafting Team Nominations

Supporting Materials

Unofficial Nomination Form (Word)
Nomination Period
 
 

 

08/22/19 - 09/20/19


Standard Authorization Request (SAR)
Clean | Redline


​The Standards Committee accepted the SAR on July 24, 2019
Drafting Team Nominations

Supporting Materials

Unofficial Nomination Form (Word)
Nomination Period
 
 

 

03/28/19 - 04/26/19

 
Supporting Materials
 
Comment Period

Info

Submit Comments

03/28/19 - 04/26/19

Comments Received

Consideration of Comments

 

​