NERC CIP 002-009

Description

NERC CIP standards are comprised of eight standards (including cyber asset identification, security management controls, personnel and training, electronic security perimeters, physical security, system security management, incident reporting and response, and recovery plan for critical cyber assets), each of which is mandatory for electric power and utility companies. This regulatory requirement is mandatory.

Scope

Applies to US electric power and utility companies