FERC Issues NOPR to Approve Reliability Standard CIP-012-1

On April 18, 2019, in Docket No. RM18-20-000, FERC issued a Notice of Proposed Rulemaking (NOPR) proposing to approve Reliability Standard CIP-012-1. CIP-012-1 addresses FERC’s directive in Order No. 822 to modify the Critical Infrastructure Program (CIP) Reliability Standards to require Responsible Entities to implement controls to protect communication links and sensitive Bulk Electric System (BES) data communicated between BES Control Centers. Reliability Standard CIP-012-1 requires Responsible Entities to develop a plan to mitigate the risks posed by unauthorized modification (integrity) and unauthorized disclosure (confidentiality) of Real-time Assessment and Real-time monitoring data. The Commission also proposes to direct that NERC develop certain modifications to Reliability Standard CIP-012-1 to require protections regarding the availability of communication links and data communicated between BES control centers and to clarify the types of data that must be protected.