NERC CIP compliance · North America
Compliance consulting, OT-safe vulnerability assessments and 24/7 monitoring for registered entities, from CIP-002 categorization to audit day.
The standards your auditor checks
CIP-002 categorization sets which requirements apply to each BES Cyber System. It’s also where many audit findings start.
Simplified from CIP-002 Attachment 1.
The clock starts once you determine an incident is reportable.
Your response plan classifies the incident.
To E-ISAC and CISA for a Reportable Cyber Security Incident.
Reported by the end of the next calendar day.
Within seven days of learning new information.
Our SOC monitors CIP-007 security events around the clock, with the one-hour reporting runbook built in. See Q-SOC.
We prepare evidence the way Regional Entity auditors expect it.
Impact ratings, policies and low impact controls
Training, access programs and physical security plans
Perimeters, patching, monitoring, baselines and OT-safe assessments
Response plans, the one-hour reporting runbook and recovery tests
BES Cyber System Information handling and vendor risk management
Worksheets and evidence binders, then a mock audit before the real one
Simplified grouping of the CIP standards. We map evidence standard by standard during the engagement.
Categorization, perimeter reviews, supply chain program, RSAWs, mock audits and evidence binders.
CIP-010 assessments that don’t take control systems down, aligned to NIST SP 800-82.
CIP-007 event monitoring and CIP-008 reportable-incident detection.
Your registration, impact ratings and Regional Entity.
.webp)
We reply within 1 business day.
Pixel icons by Streamline, CC BY 4.0. This page summarises NERC CIP standards and is not legal advice.
