NERC CIP Cybersecurity Standards | Consulting Services | Consultants for Cybersecurity Programs
Cybersecurity in the Energy & Utilities Space
Born out of a voluntary move by the electric utility industry because of a widespread blackout throughout the Northeast in 1965, the National Electric Reliability Council came into existence. By 1981, it changed its name to the North American Electric Reliability Corporation, a non-profit body created and funded by the utilities themselves, and subject to the Federal Energy Regulatory Commission, the United States government’s regulatory entity for energy.
Fast-forward to the current cybersecurity climate and its impact on the broader utilities sector, and you’ll find a laundry list of NERC Critical Infrastructure Protection (CIP) standards for which entities that own or manage any part of the U.S. and Canadian electric power grid must comply with.
Why Centris for NERC CIP?
(1). Unquestioned Industry Expertise in the Utilities Sector:
Since 2002, Centris has worked extensively within the broader utilities sector throughout North America in various aspects of information security, cybersecurity, and regulatory compliance. At Centris, we offer proven measures relating to cyber strategy, along with customized programs, cyber maturity assessments, cyber threat modeling, along with NIST, DoD, ISO, and other cybersecurity initiatives.
(2). Provider of World-Class Cybersecurity Documentation:
Since 2002, Centris has been developing, and constantly refining a wide-range of NIST and NERC CIP specific information security, cybersecurity and operational specific policy and procedure documents. We also have years of expertise working with cyber related compliance programs, such as NIST RMF, FISMA, FBI CJIS, FedRAMP, eMASS/NISP, NIST 800-171, and CMMC. We also offer our CENTRIS ONE portal, well-researched, professionally developed information security, cybersecurity, risk management, and privacy documentation for helping businesses all across the globe with growing regulatory compliance reporting mandates.
(3). A Unique Understanding of Compliance & Cybersecurity:
Regulatory compliance and cybersecurity are now converging at an accelerated pace, and that holds true for the utilities sector with the NERC CIP standards. Centris has years of expertise helping entities comply with NERC CIP in an efficient, yet comprehensive manner.
(4). Fixed Fee with No Hidden Costs:
Since 2002, our pricing philosophy is simple. Fixed-fees with no hidden costs.
How Centris Can Help with NERC CIP
- We’ll help clarify cybersecurity standards and what it means for your organization.
- We’ll build a proven roadmap for your cybersecurity program.
- We’ll develop all of your cybersecurity program policies and procedures.
CENTRIS
Leaders in Security & Regulatory Compliance
"Through 2025, 30% of critical infrastructure organizations will experience a security breach that will result in the halting of an operations, or mission-critical cyber-physical system."
An Evolving Set of Cybersecurity Standards from NERC
As of today, NERC has put forth the following critical infrastructure protection “standards” that entities must comply with:
- CIP-002-5.1a BES Cyber System Categorization
- CIP-003-8 Security Management Controls
- CIP-004-6 Personnel & Training
- CIP-005-6 Electronic Security Perimeter(s)
- CIP-006-6 Physical Security of BES Cyber Systems
- CIP-007-6 System Security Management
- CIP-008-6 Incident Reporting and Response Planning
- CIP-009-6 Recovery Plans for BES Cyber Systems
- CIP-010-3 Configuration Change Management and Vulnerability Assessments
- CIP-011-2 Information Protection
- CIP-013-1 Supply Chain Risk Management
- CIP-014-2 Physical Security
For each of the NERC CIP standards, entities need to have comprehensive documentation in place in the form of policies & procedures, and other supporting programs and plans. Centris can assist in developing all required documentation for NERC CIP.
Why Choose Centris for NER CIP Compliance?
- Global cybersecurity experts with years of real-world expertise.
- Proven track record in creating customized cybersecurity programs.
- Decades of energy sector compliance expertise.
Additional Related Services
Protect Your Digital Systems & Ensure Compliance at All Levels
From robust security and compliance solutions to risk analysis and corporate strategy - partner with CENTRIS for enterprise resilience.