About the Book
From the authors of Protecting Critical Infrastructure and CIP Low...The NERC CIP INTERNAL CONTROLS REFERENCEThe NERC CIP Internal Controls Reference includes 38 Internal Control Designs for NERC CIP Compliance. The controls are presented in a common design model including the name, description, business rules, measures and requirements, evidence to be collected, tasks, roles, forms, fields and workflow for each control. The controls come from field use cases across North America (United States and Canada).This book is an invaluable resource for everyone responsible for ensuring NERC CIP Compliance. Use it to map a successful internal controls strategy all at once or to cherry-pick design ideas or improvements as you like. It doesn't matter. In both cases this book represents a fast-track means to getting your hands around internal controls for NERC CIP fast.At least one control is included in the book for: BES Cyber System / Asset Categorization, Cyber Security Policy Review, Cyber Security Training Verification, CIP Senior Manager, CIP Senior Manager Delegation of Authority, Quarterly Security Awareness, CIP Exceptional Circumstances, Personnel Risk Assessment, New Employee Onboarding, Access Rights Grants, Quarterly Access Rights Verification, Electronic Access Verification, Revoke Access Rights, Electronic Security Perimeter, Interactive Remote Access Management, Physical Security Plan, Visitor Program, PACS Maintenance and Testing, Ports and Services, Security Patch Management, Malicious Code Prevention Review, Security Event Monitoring, System Access Verification, Cyber Security Incident Response Plan, BES Cyber Systems Recovery Plans, Configuration Change Management, Vulnerability Assessments, Transient Cyber Assets & Removable Media, Information Protection, and BES Cyber Asset Reuse and Disposal.TERRY SCHURTER is co-founder and President of CIP Core, Inc. Terry has won awards for controls engineering, software development, and Global Thought Leadership. He's worked with utilities and vendors across the country building solutions for NERC compliance, in particular with NERC CIP. Terry is author/co-author of Protecting Critical Infrastructure, CIP Low, Customer Expectation Management, The Insiders' Guide to BPM, and Technologies for Government Transformation. He's a noted analyst, speaker and researcher on process methodologies, techniques and practices to drive accuracy, consistency and quality throughout the business functions of the enterprise.KARL PERMAN is co-founder and Chief Operating Officer of CIP Core. He's also an energy sector consultant for NERC compliance, cyber security, physical security, reliability, and risk management. Karl is an educator and University of Phoenix faculty member in criminal justice, security and information technology. He also serves on the EnergySec Board of Directors and ASIS International Investigations Council. Past critical infrastructure protection leadership positions include Exelon Corporation and Southern California Edison, and Director of Security for the North American Transmission Forum. He has a Master's Degree in Public Safety Administration from Lewis University and Bachelor's in Public Law and Government from Eastern Michigan University.SPONSORED BY CIP CORE, INC. CIP Core is a non-profit Educational Services Provider dedicated to delivering educational material and services, including but not limited to, online training, educational resources, and other resources to the electric industry in North America for the purposes of improving and protecting the reliability of the Bulk Electric System. www.cipcore.org
