NERC CIP

NERC CIP Cybersecurity Standards | Consulting Services | Consultants for Cybersecurity Programs

Cybersecurity in the Energy & Utilities Space

Born out of a voluntary move by the electric utility industry because of a widespread blackout throughout the Northeast in 1965, the National Electric Reliability Council came into existence. By 1981, it changed its name to the North American Electric Reliability Corporation, a non-profit body created and funded by the utilities themselves, and subject to the Federal Energy Regulatory Commission, the United States government’s regulatory entity for energy.

Fast-forward to the current cybersecurity climate and its impact on the broader utilities sector, and you’ll find a laundry list of NERC Critical Infrastructure Protection (CIP) standards for which entities that own or manage any part of the U.S. and Canadian electric power grid must comply with.

Why Centris for NERC CIP?

(1). Unquestioned Industry Expertise in the Utilities Sector:

Since 2002, Centris has worked extensively within the broader utilities sector throughout North America in various aspects of information security, cybersecurity, and regulatory compliance. At Centris, we offer proven measures relating to cyber strategy, along with customized programs, cyber maturity assessments, cyber threat modeling, along with NIST, DoD, ISO, and other cybersecurity initiatives.

(2). Provider of World-Class Cybersecurity Documentation:

Since 2002, Centris has been developing, and constantly refining a wide-range of NIST and NERC CIP specific information security, cybersecurity and operational specific policy and procedure documents. We also have years of expertise working with cyber related compliance programs, such as NIST RMF, FISMA, FBI CJIS, FedRAMP, eMASS/NISP, NIST 800-171, and CMMC. We also offer our CENTRIS ONE portal, well-researched, professionally developed information security, cybersecurity, risk management, and privacy documentation for helping businesses all across the globe with growing regulatory compliance reporting mandates.

(3). A Unique Understanding of Compliance & Cybersecurity:

Regulatory compliance and cybersecurity are now converging at an accelerated pace, and that holds true for the utilities sector with the NERC CIP standards. Centris has years of expertise helping entities comply with NERC CIP in an efficient, yet comprehensive manner.

(4). Fixed Fee with No Hidden Costs:

Since 2002, our pricing philosophy is simple. Fixed-fees with no hidden costs.

How Centris Can Help with NERC CIP

We’ll help clarify cybersecurity standards and what it means for your organization.
We’ll build a proven roadmap for your cybersecurity program.
We’ll develop all of your cybersecurity program policies and procedures.

CENTRIS

Leaders in Security & Regulatory Compliance

Risk Strategies & Methodologies

Risk management planning reduces exposure to a wide-range of issues that could have detrimental effects on a business. Not knowing, planning, or responding to risks and related issues can leave an organization with few options in combating risks when they actually surface.

CENTRIS Advisory Methods

Strategic Planning & Integration

Every organization is moving towards a digitized business model, so isn’t it time to strategize on some of the most critically important elements for your business?

Explore CENTRIS Strategies

Regulatory Compliance Experts

Build scalable, adaptable, and efficient compliance solutions for increased organizational efficiency, while also improving core InfoSec, cybersecurity, operational and data privacy controls and best practices.

Regulatory Compliance For All Industries

"Through 2025, 30% of critical infrastructure organizations will experience a security breach that will result in the halting of an operations, or mission-critical cyber-physical system."
- Gartner

An Evolving Set of Cybersecurity Standards from NERC

As of today, NERC has put forth the following critical infrastructure protection “standards” that entities must comply with:

CIP-002-5.1a BES Cyber System Categorization
CIP-003-8 Security Management Controls
CIP-004-6 Personnel & Training
CIP-005-6 Electronic Security Perimeter(s)
CIP-006-6 Physical Security of BES Cyber Systems
CIP-007-6 System Security Management
CIP-008-6 Incident Reporting and Response Planning
CIP-009-6 Recovery Plans for BES Cyber Systems
CIP-010-3 Configuration Change Management and Vulnerability Assessments
CIP-011-2 Information Protection
CIP-013-1 Supply Chain Risk Management
CIP-014-2 Physical Security

For each of the NERC CIP standards, entities need to have comprehensive documentation in place in the form of policies & procedures, and other supporting programs and plans. Centris can assist in developing all required documentation for NERC CIP.