NERC Submits Proposed Reliability Standards CIP-013-1, CIP-005-6, and CIP-010-3

On September 26, 2017, in Docket No. RM17-13-000, NERC submitted Reliability Standards CIP-013-1 (Cyber Security – Supply Chain Risk Management), CIP-005-6 (Cyber Security – Electronic Security Perimeter(s)) and CIP-010-3 (Cyber Security – Configuration Change Management and Vulnerability Assessments).  These proposed standards address Order No. 829.  In that order the Commission directed NERC to develop new or modified Reliability Standards addressing supply chain cybersecurity risk management for industrial control system hardware, software and computing and networking services associated with Bulk Electric System (BES) operations. NERC also requests approval of the associated Implementation Plan, Violation Risk Factors and Violation Severity Levels as well as the retirement of Reliability Standards CIP-005-5 and CIP-010-2.  The NERC Board adopted the proposed Reliability Standards on August 10, 2017.

To view NERC’s filing, click here.