NERC Cyber Security Standards to Become Mandatory in United States

 

PRINCETON, N.J., Jan. 17, 2008

In a major move toward ensuring the reliability of the electric grid, the Federal Energy Regulatory Commission (FERC) today approved eight cyber security and critical infrastructure protection standards proposed by NERC. Set to become mandatory when the Commission’s order becomes effective in approximately 60 days, the standards will require bulk power system users, owners, and operators in the U.S. to identify and document cyber risks and vulnerabilities, establish controls to secure critical cyber assets from physical and cyber sabotage, report security incidents, and establish plans for recovery in the event of an emergency. The standards are already mandatory in Ontario and New Brunswick in Canada.

Applicable to the bulk power transmission and generation system, these standards were developed via NERC’s American National Standards Institute (ANSI) accredited process, incorporating thousands of comments from industry experts and operations personnel.

“The critical infrastructure protection standards approved today are a sound starting point for the electric industry to begin more thoroughly addressing cyber security,” commented Rick Sergel, NERC President & CEO. “As we move forward, we will address the Commission’s directives and continually evaluate how these standards are executed in practice. We will monitor key industry and technology developments. We will ensure that the bulk power system in North America remains as reliable as possible.”

The North American Electric Reliability Corporation’s (NERC) mission is to ensure the reliability of the bulk power system in North America. To achieve that, NERC develops and enforces reliability standards; assesses adequacy annually via a 10-year forecast and winter and summer forecasts; monitors the bulk power system; audits owners, operators, and users for preparedness; and educates, trains, and certifies industry personnel. NERC is a self-regulatory organization, subject to oversight by the U.S. Federal Energy Regulatory Commission and governmental authorities in Canada. Learn more at www.nerc.com .