North American Electric Reliability Council (NERC) Cyber Security Standards Draft3

　こんにちは、丸山満彦です。北米の電力業者の団体のサイバーセキュリティー対策標準のドラフトです。備忘録・・・

　
■North American Electric Reliability Council (NERC)
・Standards Authorization Requests Approved for Posting

・Draft 3
・・CIP-002-1 through CIP-009-1

CIP-002-1 Critical Cyber Assets
CIP-003-1 Security Management Controls
CIP-004-1 Personnel & Training
CIP-005-1 Electronic Security
CIP-006-1 Physical Security of Critical Cyber Assets
CIP-007-1 Systems Security Management
CIP-008-1 Incident Reporting and Response Planning
CIP-009-1 Recovery Plans for Critical Cyber Assets

Document Structure

A. Introduction
1. Title:
2. Number:
3. Purpose: .
4. Applicability:
5. Effective Date:

B. Requirements

C. Measures

D. Compliance
1. Compliance Monitoring Process
1.1. Compliance Monitoring Responsibility
1.2. Compliance Monitoring Period and Reset Timeframe
1.3. Data Retention
1.4. Additional Compliance Information
2. Levels of Noncompliance
E. Regional Differences

---

このブログの中の意見は私見であり、所属・関係する組織の意見ではないことをご了承ください。