Features
- Assists utilities in complying with NERC CIP standards compliance
- Establishes baseline for improvements
- Identifies inherent weaknesses and offers the most cost-effective solutions
- Increases security awareness
- Provides a tool for fleet management
|
|
Guidance to CIP Standards Compliance
To help our customers meet NERC’s critical infrastructure protection (CIP) standards, Emerson Process Management offers assistance in the overall compliance process. Emerson’s Security Assessment module is the first step towards CIP compliance.
The Security Assessment module, part of Emerson’s SureService customer support programs, is designed to help utilities identify, collect, and document key control system parameters. In assessing and tracking both plant- and enterprise-wide CIP compliance, the module provides:
- A review of the current system operations and practices
- A thorough inventory and characterization of current control system hardware and software
- A tool to prepare, direct, and manage the compliance process for a single plant or the entire fleet
On-Site Assessment
An onsite system assessment conducted by Emerson personnel provides insight into the current system relating to its configuration, applications, and operations. Special attention is given to the system’s connections to non-control applications in order to distinguish inherent vulnerabilities. Additionally, Emerson will conduct interviews with plant personnel to further identify areas for improvement.
Web-Based Assessment
The web-based assessment is an online evaluation tool which consists of multiple questions based on CIP standards. This tool allows plant management to conduct broad-based, anonymous internal surveys throughout their organization to gain insight into the full range of security issues included in the CIP criteria. A sophisticated set of data management and display options included in the tool allows management personnel to fully understand their strengths and weaknesses in CIP compliance, while tracking conformance across multiple units or the entire fleet.
Communication of Results
At the conclusion of the onsite assessment, Emerson will provide a detailed report documenting the findings as well as recommendations for improvements.
The web-based online analysis will be available to management during the SureService contract period for periodic review and analysis to facilitate resource planning and support continued CIP compliance.
|