Preparing for NERC CIP-015-1: Internal Network Security Monitoring for Electric Utilities
We’re finally in the home stretch for the long-anticipated updates to the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Reliability Standards, which introduce a new reliability standard: CIP-015-1 – Cyber Security – Internal Network Security Monitoring (INSM). In January 2023, the Federal Energy Regulatory Commission (FERC) issued Order 887 directing NERC, which it oversees, to create the standard.
CIP-015-1 made it through the NERC adoption process on May 9, 2024, and is pending approval by FERC. Once it’s approved (T0), all high-impact bulk electric systems (BESs) across the U.S. and Canada will have 36 months to implement INSM, and medium-impact BESs with external routable connectivity (ERC) will have 60 months to do so...read more!