Lessons learned from NERC CIP applied to the industrial world

摘要

NERC Critical Infrastructure Protection (CIP) Reliability Standards apply to utilities that support the bulk electrical grid in North America and are meant to protect the Grid from cyber-attack. While Industrial facilities are not bound by the regulations outlined in NERC CIP a review of those regulations can help industrial facilities protect their infrastructure from cyber-attack. This paper reviews some of the rules of CIP and how they might help an industrial facility secure their cyber infrastructure. Topics to be covered include: physical security for cyber assets, passwords and password management of cyber assets, event logging of cyber events.