FERC Approves Reliability Standard CIP-003-8

On July 31, 2019, in Docket No. RD19-5-000, FERC issued a letter order approving NERC's request for approval of proposed Reliability Standard CIP-003-8 (Cyber Security — Security Management Controls). The order also approves the retirement of Reliability Standard CIP-003-7. The purpose of Reliability Standard CIP-003-8 is to specify consistent and sustainable security management controls that establish responsibility and accountability to protect BES Cyber Systems against compromise that could lead to misoperation or instability in the bulk electric system. NERC filed the petition in response to the Commission’s directive in Order No. 843 to develop modifications to the Reliability Standards to mitigate the risk of malicious code that could result from third-party transient electronic devices for los impact BES Cyber Systems.