TDi Technologies recently released three whitepapers on NERC-CIP that have proven to be extremely valuable to the Utilities industry at large. These whitepapers deal with requirements that are in the current version 5 draft of the NERC-CIP standards, although they each apply to the existing NERC-CIP regulations as well.
The subjects covered in these whitepapers include Baseline Configuration Management, Remote Access Management, and Configuration Port Security. The purpose of the whitepapers is to promote understanding of the compliance expectations being driven by NERC-CIP regulations in the context of the security issues they address.
The first whitepaper discusses the importance of baseline configuration as a critical security management control. The whitepaper is available at: Whitepaper: NERC-CIP-010-5 R1 R2
The second paper discusses the Security Requirements for remote access management to the Bulk Energy System. This whitepaper is available at: Whitepaper: NERC-CIP-005-5 R2
The third whitepaper discusses the importance and relevance of configuration ports to Utility Cyber Security. This whitepaper is available at: Whitepaper: NERC-CIP-007-5 R1
Additional case studies and solution briefs for the Utilities industry are available at our: Utilities page