As a utility company, are we required to meet any legal minimum security standards?
Yes. NERC’s Permanent Mandatory Cyber Security Standards went into effect on June 1, 2006. CIP-002 through -009 require due diligence in certifying that the security of your cyber assets, including the physical security of them, is assured. The Steadfast group specializes in NERC CIP compliance assignments where we train and guide your internal team to comply with NERC’s standards and walk them through all the reporting requirements.
