| Insights | Blogs

FERC Approves Reliability Standard CIP-003-7

On April 19, 2018, in Docket No. RM17-11-000, FERC issued a Final Rule approving (1) Reliability Standard CIP-003-7, (2) the associated violation risk factors and violation severity level assignments, (3) implementation plan, (4) revised definitions for inclusion in the NERC Glossary. Reliability Standard CIP-003-7 clarifies the obligations pertaining to electronic access control for low impact BES Cyber Systems, requires mandatory security controls for transient electronic devices at low impact BES Cyber Systems, and requires responsible entities to have a policy for declaring and responding to CIP Exceptional Circumstances related to low impact BES Cyber Systems. In addition, the Commission directs NERC to develop modifications to the CIP Reliability Standards to mitigate the risk of malicious code that could result from third-party transient electronic devices.

To view FERC’s final rule, click here.