Implementing national electrical reliability corporation/critical infrustructure protection standards (NERC/CIP) in the real world utility industry.

摘要

The purpose of this research is to investigate how National Electrical Reliability Corporation and Critical Infrastructure Protection Standards (NERC/CIP) version standards are implemented, in order to provide insight into how NERC/CIP standards are interpreted in the field. The outcomes showed cyber-security architecture must be designed within an end to end system framework.;It is recommended to: (1) Study the actual policy board discussion between CIP Version 3 and 5 to determine what priorities were established for implementation architecture; (2) answer the question did the original intent of NERC/CIP guidance get lost in today's threat environment; and (3) define how NERC/CIP will address active cyber-security interests and concerns going forward?