Tech moves fast! Stay ahead of the curve with Techopedia!
Join nearly 200,000 subscribers who receive actionable tech insights from Techopedia.
NERC CIP
Definition - What does NERC CIP mean?
The North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) is a NERC movement that was formed to regulate, enforce, monitor and manage the physical and logical security of systems that manage the electrical power of grids.
The NERC CIP provides and manages the standards, compliance, risk assessment and all underlying secure and confidential processes involved with the computing systems of the NERC.
The NERC CIP provides and manages the standards, compliance, risk assessment and all underlying secure and confidential processes involved with the computing systems of the NERC.
Techopedia explains NERC CIP
The NERC CIP provides a suite of standards that ensure the overall security of computing systems that directly manage the power grids and all supported subsystems or resources. The NERC CIP was created to protect and secure these systems, primarily from acts of cyberterrorism.
The NERC CIP focuses on nine standards that cover the overall guidelines and security for enforcing governance of underlying systems. These standards incorporate the basics of identifying critical assets, creating control mechanism and logical and physical security of these systems to recover these assets in the event of an incident.
The NERC CIP standards include the following:
The NERC CIP focuses on nine standards that cover the overall guidelines and security for enforcing governance of underlying systems. These standards incorporate the basics of identifying critical assets, creating control mechanism and logical and physical security of these systems to recover these assets in the event of an incident.
The NERC CIP standards include the following:
- Sabotage reporting
- Personnel and training
- Critical cyber asset identification
- Electronic security perimeters
- Security management controls
- System security management
- Physical security of cyber assets
- Recovery plans for critical cyber assets
- Incident reporting and response management
