Strengthened cyber security standards approved

subscribe

Eight revised cyber security standards for the North American bulk power system were approved by the North American Electric Reliability CorporationÂ’s (NERC) independent Board of Trustees.

The action represents the completion of phase one of NERCÂ’s cyber security standards revision work plan which was launched in July 2008. Work continues on phase two of the revision plan, with version three standards already under development.

The revised standards were recently passed by the electric industry with an 88% approval rating, evidence of the industryÂ’s strong support for NERCÂ’s standards development process and the more stringent standards.

The standards are comprised of approximately 40 “good housekeeping” requirements designed to lay a solid foundation of sound security practices that, if properly implemented, will develop the capabilities needed to secure critical infrastructure from cyber security threats. Roughly half of those requirements were modified to clarify or strengthen the standards in this initial, expedited revisions phase.

The revisions begin to address concerns raised by the Federal Energy Regulatory Commission in its Order No. 706, in which it conditionally approved the standards currently in effect. The revisions notably include the removal of the term “reasonable business judgment” from the standards.

Entities found in violation of the standards can be fined up to $1 million per day, per violation in the U.S., with other enforcement provisions in place throughout much of Canada. Audits for compliance with 13 requirements in the cyber security standards currently in effect will begin on July 1.

“The approval of these revisions is evidence that NERC’s industry-driven standards development process is producing results, with the aim of developing a strong foundation for the cyber security of the electric grid,” commented Michael Assante, Vice President and Chief Security Officer at NERC. “We applaud the work of the standards drafting team leading this effort and look forward to presenting phase two of the revisions to the board for approval early in 2010.”

“It’s important to note, however, that these standards are not designed to address specific, imminent cyber security threats,” he continued. “We firmly believe carefully crafted emergency authority is needed at the government level to address this gap.”

Related News

power tower

Planning for Toronto?s Growing Electricity Needs

TORONTO - As Toronto's population and economy continue to expand, the demand for electricity in the city is also increasing rapidly. In response, the Ontario government, in partnership with the City of Toronto and various stakeholders, has launched an initiative to enhance the electricity infrastructure to meet future needs.

The Ontario Ministry of Energy and the City of Toronto are focusing on a multi-faceted approach that includes upgrades to existing power systems and the integration of renewable energy sources. This initiative is critical as Toronto looks towards a sustainable future, with projections indicating significant growth in both residential and commercial…

READ MORE
B.C. Streamlines Regulatory Process for Clean Energy Projects

B.C. Streamlines Regulatory Process for Clean Energy Projects

READ MORE

florida lineman

Florida Court Blocks Push to Break Electricity Monopolies

READ MORE

powerline worker

Kenya Power on the spot over inflated electricity bills

READ MORE

paris-finalises-energy-roadmap-for-2025-2035-with-imminent-decree

Paris Finalises Energy Roadmap for 2025–2035 with Imminent Decree

READ MORE