NERC Cyber Security Standards to Become
Mandatory in United States
PRINCETON, N.J., Jan. 17, 2008
In a major move toward ensuring the reliability of the electric grid, the
Federal Energy Regulatory Commission (FERC) today approved eight cyber
security and critical infrastructure protection standards proposed by NERC.
Set to become mandatory when the Commission’s order becomes effective in
approximately 60 days, the standards will require bulk power system users,
owners, and operators in the U.S. to identify and document cyber risks and
vulnerabilities, establish controls to secure critical cyber assets from
physical and cyber sabotage, report security incidents, and establish plans
for recovery in the event of an emergency. The standards are already
mandatory in Ontario and New Brunswick in Canada.
Applicable to the bulk power transmission and generation system, these
standards were developed via NERC’s American National Standards Institute
(ANSI) accredited process, incorporating thousands of comments from industry
experts and operations personnel.
“The critical infrastructure protection standards approved today are a sound
starting point for the electric industry to begin more thoroughly addressing
cyber security,” commented Rick Sergel, NERC President & CEO. “As we move
forward, we will address the Commission’s directives and continually
evaluate how these standards are executed in practice. We will monitor key
industry and technology developments. We will ensure that the bulk power
system in North America remains as reliable as possible.”
The North American Electric Reliability Corporation’s (NERC) mission is to
ensure the reliability of the bulk power system in North America. To achieve
that, NERC develops and enforces reliability standards; assesses adequacy
annually via a 10-year forecast and winter and summer forecasts; monitors
the bulk power system; audits owners, operators, and users for preparedness;
and educates, trains, and certifies industry personnel. NERC is a
self-regulatory organization, subject to oversight by the U.S. Federal
Energy Regulatory Commission and governmental authorities in Canada. Learn
more at www.nerc.com . |