NERC Critical Infrastructure Protection (CIP)

NERC Critical Infrastructure Protection (CIP)

September 20-21, 2022 | Online :: Central Time

“This is a great course to attend to gather a better understanding and a deeper knowledge of the NERC CIP standard. I gained exceptional knowledge and example from this course that is extremely helpful to implementing the standards and to make sure we have the current standards understood correctly and implemented correctly. The course provided great examples an inside view of what the industry is expected to do and what the auditors expect.” Corporate Cyber Security Operations Tech Analyst, NPPD

“This class is a must-do for anyone involved in CIP Physical/Cyber Security. Very glad I came.” Compliance Superintendent, Alameda Municipal Power

This session will provide an overview of the NERC CIP Reliability Standards. The electric grid in North America is at the top of the list of critical infrastructures maintained by Presidential Directive by the Department of Homeland Security and it is recognized that the remaining critical infrastructures will not function without a reliable supply of electricity.  As a result, cyber and physical security for electric utilities is at the forefront of the legislators and regulators agenda following recent cyber and physical attacks in the US and elsewhere in the world.

To address these risks, the North American Electric Reliability Corporation (NERC) has developed and maintained a set of Critical Infrastructure Protection (CIP) standards that are mandatory and enforceable.  These standards have undergone significant change since they were first adopted in FERC Order 706.  These standards have been extended to include all Bulk Electric System Assets and their related Cyber Assets each categorized as High, Medium, and Lower Risk assets thereby extending the program to all registered entities and all bulk electric system assets at some level.

This course will provide a deep fundamental understanding of the NERC CIP standards including a history of their development, an understanding of the present standards, and a view of what is coming in future standard development.  The course will also provide a detailed overview of each standard, its fundamental purpose, and the intent of each requirement.

Developing programs to meet the intent of the standard is challenging since compliance with the standards requires disciplines from several key corporate functions including electric system operations, information technology, corporate security, and human resources at a minimum.  This course will review organizational structures for successful implementation and their experiences.  This course will also provide an overview of compliance and monitoring efforts that NERC will conduct for the CIP standards and is designed to give the necessary background for all staff to understand the concepts and complexities of NERC compliance in order to communicate and build a culture of compliance and reliability and prepare for upcoming CIP audits.

Learning Outcomes

  • Review the background for the NERC Critical Infrastructure Standards and discuss major recent revisions
  • Review the scope and purpose of the NERC Critical Infrastructure Protection (CIP) standards
  • Examine the NERC CIP requirements: Current version and upcoming revisions
  • Assess the confidentiality provisions of the CIP standards
  • Explain how violations are determined and identify which CIP standards are the most violated and why
  • Discuss the challenges faced by utilities in defining a compliance program across the corporate functions necessary for CIP compliance (operations, information technology, corporate security, human resources, etc.)
  • Define a culture of compliance and its importance in the compliance monitoring and enforcement process
  • Examine strategies to build an internal CIP compliance program in such a diverse environment
  • Analyze the audit process for CIP standards and demonstrate strategies for success before, during, and after an audit

Agenda

Tuesday, September 20, 2022 : Central Time

12:30 – 1:00 p.m.
Log In and Welcome

1:00 – 4:00 p.m.
Course Timing

 

Short breaks will be taken throughout the sessions

History and Background of NERC CIP

  • Reliability standards

NERC CIP Version 5 – New Definitions

    • Review of the intent and purpose of each standard
    • Understanding each of the requirements
    • Departments involved in meeting the intent

NERC CIP Physical and Cyber Security – Part 1

  • Bulk electric system (BES) cyber system categorization
  • Security management controls
  • Personnel & training
  • Electronic security perimeters

 

Wednesday, September 21, 2022 : Central Time

8:30 – 9:00 a.m.
Log In and Welcome

12:00 – 12:30 p.m.
Lunch Break

9:00 a.m. – 4:00 p.m.
Course Timing

 

Short breaks will be taken throughout the sessions

NERC CIP Physical and Cyber Security – Part 2

  • Physical security plan
  • Audit process and preparation
  • System security management
  • Incident reporting/response planning
  • Recovery plans for BES cyber systems
  • Organizing for compliance
  • Configuration change management and vulnerability assessments
  • Information protection
  • Managing documentation and evidence

NERC CIP Tools and Resources

    • “Tools” and NERC CIP compliance
    • Active vulnerability assessment tools
    • Danger: Active scanning of ICS environments is risky business!
    • Emerging issues and new standards

Instructor

Eric Smith, Senior NERC CIP Compliance Consultant, Burns & McDonnell

Mr. Smith is an analytical and results-driven NERC CIP specialist bringing along 20+ years of experience with expert understanding of NERC CIP reliability standards, specifically cyber security and network architecture standards. Skillful in developing and implementing successful internal compliance programs that have been tested through numerous audits and certifications in the WECC region as well as RF and NPCC. Proficient in developing CIP programs for Medium and Low impact BES cyber systems, focused on GO/GOP, TO/TOP, and BA entities in the hydro, storage and renewable energy arenas. Mr. Smith is a creative and innovative solution leader developing results based in the NERC CIP, NIST 800, ISO 27000, and corporate business standards. Mr. Smith drives organizations to maintain focus on achieving a solid sustainable cyber security compliance program through preparation of communication documents to promulgate information related to the NERC CIP Reliability Compliance Program. He is a self-driven leader with the ability to thrive in a fast-paced environment coupled with proficiency to think outside the box as well as effective team working and communication skills.

Online Delivery

We will be using Microsoft Teams to facilitate your participation in the upcoming event. You do not need to have an existing Teams account in order to participate in the broadcast – the course will play in your browser and you will have the option of using a microphone to speak with the room and ask questions, or type any questions in via the chat window and our on-site representative will relay your question to the instructor.

  • IMPORTANT NOTE: After November 30 you will not be able to join a Teams meeting using Internet Explorer 11. Microsoft recommends downloading and installing the Teams app if possible. You may also use the Edge browser or Chrome.
  • You will receive a meeting invitation will include a link to join the meeting.
  • Separate meeting invitations will be sent for the morning and afternoon sessions of the course.
    • You will need to join the appropriate meeting at the appropriate time.
  • If you are using a microphone, please ensure that it is muted until such time as you need to ask a question.
  • The remote meeting connection will be open approximately 30 minutes before the start of the course. We encourage you to connect as early as possible in case you experience any unforeseen problems.

Register

Please Note: This event is being conducted entirely online. All attendees will connect and attend from their computer, one connection per purchase. For details please see our FAQ

If you are unable to attend at the scheduled date and time, we make recordings available to all registrants for three business days after the event

REGISTER NOW FOR THIS EVENT:

NERC Critical Infrastructure Protection (CIP)

September 20-21, 2022 | Online
Individual attendee(s) - $ 1195.00 each

Volume pricing also available

Individual attendee tickets can be mixed with ticket packs for complete flexibility

Pack of 5 attendees - $ 4,780.00 (20% discount)
Pack of 10 attendees - $ 8,365.00 (30% discount)
Pack of 20 attendees - $ 14,340.00 (40% discount)

This event is related and may be of interest.

Your registration may be transferred to a member of your organization up to 24 hours in advance of the event. Cancellations must be received on or before August 12, 2022 in order to be refunded and will be subject to a US $195.00 processing fee per registrant. No refunds will be made after this date. Cancellations received after this date will create a credit of the tuition (less processing fee) good toward any other EUCI event. This credit will be good for six months from the cancellation date. In the event of non-attendance, all registration fees will be forfeited. In case of conference cancellation, EUCIs liability is limited to refund of the event registration fee only. For more information regarding administrative policies, such as complaints and refunds, please contact our offices at 303-770-8800

CEUs

Credits

AP_Logo

EUCI is accredited by the International Accreditors for Continuing Education and Training (IACET) and offers IACET CEUs for its learning events that comply with the ANSI/IACET Continuing Education and Training Standard. IACET is recognized internationally as a standard development organization and accrediting body that promotes quality of continuing education and training.

EUCI is authorized by IACET to offer 0.9 CEUs for this event.

Requirements for Successful Completion of Program  

Participants must sign in/out each day and be in attendance for the entirety of the course to be eligible for continuing education credit.  

Instructional Methods  

PowerPoint presentations will be used in this course 


Upon successful completion of this event, program participants interested in receiving CPE credits will receive a certificate of completion.

Course CPE Credits: 10.5
There is no prerequisite for this Course.
Program field of study: Specialized Knowledge
Program Level: Basic
Delivery Method: Group-Live
Advanced Preperation: None

CpeEUCI is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its web site: www.nasbaregistry.org

 

 

Who Should Attend

  • NERC registered entity personnel with compliance responsibilities
  • Compliance managers and directors
  • Generation owners and operators, including Independent Power Producers and renewable energy project developers
  • Transmission owners and operators, including merchant transmission projects
  • Attorneys and regulators
  • RTO/ISO staff

By clicking Accept or closing this message, you consent to our cookies on this device in accordance with our cookie policy unless you have disabled them. more information

By clicking Accept or closing this message, you consent to our cookies on this device in accordance with our cookie policy unless you have disabled them. You can change your cookie settings at any time but parts of our site will not function correctly without them. We use cookies during the registration process and to remember member settings.

Close