GAO reviewed the Department of Energy, Federal Energy Regulatory Commission's (FERC) new rule on Version 5 Critical Infrastructure Protection Reliability Standards. GAO found that (1) FERC approves the Version 5 Critical Infrastructure Protection Reliability Standards, CIP-002-5 through CIP-011-1, submitted by the North American Electric Reliability Corporation (NERC). NERC is the Commission-certified Electric Reliability Organization. The CIP Version 5 Standards address the cyber security of the bulk electric system by applying new cyber security controls and extending the scope of the systems that are protected by the CIP Reliability Standards. This rule also approves 19 new or revised definitions associated with the CIP Version 5 Standards for inclusion in the Glossary of Terms Used in NERC Reliability Standards. In addition, this rule directs NERC to develop modifications to the CIP Version 5 Standards and submit informational filings; and the (2) FERC complied with applicable requirements in promulgating the rule.
↧