Nerc Cyber Security Incident Response Plan

Cip 008 6 table r1 cyber security incident response plan specifications part applicable.

Nerc cyber security incident response plan.

The vision for the electric reliability organization enterprise which is comprised of nerc and the six regional entities is a highly reliable and secure north american bulk power system. Compromises or was an attempt to compromise the electronic security. A test of the cyber security incident response plan can range from a paper drill to a full operational exercise to the response to an actual incident. Staff of the federal energy regulatory commission ferc and the north american electricity reliability corporation nerc today published a report on cyber planning for response and recovery that outlines best practices for the electric utility industry.

Response actions including roles and responsibilities of cyber. Each responsible entity shall document one or more cyber security incident response plan s that collectively include each of the applicable requirement parts in cip 008 6 table r1 cyber security incident response plan specifications. Federal energy regulatory commission ferc and the north american electricity reliability corporation nerc released a study on cyber incident response and recovery best practices for electric utilities. The nerc glossary of terms used in nerc reliability standards june 12 2018 nerc glossary defines a cyber security incident as a malicious act or suspicious event that.

The joint staffs of ferc and nerc and the nerc regional entities developed today s report after interviewing subject. Testing the cyber security incident response plan does not require removing a component or system from service during the test. Federal energy regulatory commission ferc and the north american electricity reliability corporation nerc last week released a report outlining cyber incident response and recovery best practices for electric utilities. What it means to you.

The study is based on. Our mission is to assure the effective and efficient reduction of risks to the reliability and security of the grid. Each responsible entity shall document one or more cyber security incident response plan s that collectively include each of the applicable requirement parts in cip 008 5 table r1 cyber security incident response plan specifications. The report is based on a study conducted by staff at ferc nerc and nerc regional entities.

Security incidents related to any critical cyber assets must be identified classified responded to and reported in a manner deemed appropriate by nerc.