RIN Data

In Order No. 822, the Commission approved seven critical infrastructure protection (CIP) Reliability Standards: CIP-003-6 (Security Management Controls), CIP-004-6 (Personnel and Training), CIP-006-6 (Physical Security of BES Cyber Systems), CIP-007-6 (Systems Security Management), CIP-009-6 (Recovery Plans for BES Cyber Systems), CIP-010-2 (Configuration Change Management and Vulnerability Assessments), and CIP-011-2 (Information Protection).  The proposed Reliability Standards address the cybersecurity of the bulk electric system and improve upon the current Commission-approved CIP Reliability Standards.  In addition, the Commission directed NERC to develop certain modifications to improve the CIP Reliability Standards.  In Order No. 829, the Commission directed the North American Electric Reliability Corporation to develop a new or modified Reliability Standard that addresses supply chain risk management for industrial control system hardware, software, and computing and networking services associated with bulk electric system operations. The new or modified Reliability Standard is intended to mitigate the risk of a cybersecurity incident affecting the reliable operation of the Bulk-Power System (Docket Nos. RM15-14-000 and RM15-14-002).