Essentials

Following the terrorist attacks of 2001 and the blackout of 2003, the North American Electric Reliability Corporation (NERC) published the Critical Infrastructure Protection (CIP) Standards to help energy companies protect against an outside attack on the nation’s energy grid via the Internet. Inside the CIP Standards are the nine Cyber Security Standards that organizations now need to be completely compliant with. All entities subject to CIP must, at the very minimum, self attest annually. In addition, any subject entity responsible for CIP will at some point be formally audited by the appropriate regional entity following the regional entities audit schedule.

A NERC-CIP Gap Assessment – Pre Audit identifies areas where an organization does not comply with NERC-CIP and outlines areas requiring remediation. The goal is to evaluate your company’s readiness to pass a formal on-site Audit by your Regional Entity.

Benefits

• Identification of non-compliant areas and understanding of what actions are needed to comply with NERC-CIP
• Proper 3rd party objective demonstration of NERC-CIP compliance
• Compliance with NERC-CIP
• Avoidance of fines that could result in the failing of a NERC-CIP audit
• Reduction of the cost, confusion, and complexity of NERC-CIP compliance

Expertise

SecureState’s Audit & Compliance consultants are experts in understanding both the technical aspects as well as the business aspects of your organization. SecureState’s experience and knowledge developed while working with some of the top energy companies in the country and governing body; provides your organization with a true picture of your compliance with CIP. Additionally, we provide help from pre-audit of the Cyber Security standards to the validation of those controls.