Version 4 Critical Infrastructure Protection Reliability Standards

Under section 215 of the Federal Power Act, the Federal Energy Regulatory Commission (Commission) approves eight modified Critical Infrastructure Protection (CIP) Reliability Standards, CIP-002-4 through CIP-009-4, developed and submitted to the Commission for approval by the North American Electric Reliability Corporation (NERC), the Electric Reliability Organization certified by the Commission. The CIP Reliability Standards provide a cybersecurity framework for the identification and protection of ``Critical Cyber Assets'' to support the reliable operation of the Bulk-Power System. Reliability Standard CIP-002-4 requires the identification and documentation of Critical Cyber Assets associated with ``Critical Assets'' that support the reliable operation of the Bulk-Power System and introduces ``bright line'' criteria for the identification of Critical Assets. The Commission approves the related Violation Risk Factors, Violation Severity Levels with modifications, implementation plan, and effective date proposed by NERC.

Agency Contact: Jan Bargen (Technical Information), Office of Electric Reliability, Division of Logistics and Security, Federal Energy Regulatory Commission, 888 First Street NE., Washington, DC 20426, (202) 502-6333, Jan.Bargen@ferc.gov. Edward Franks (Technical Information), Office of Electric Reliability, Division of Logistics and Security, Federal Energy Regulatory Commission, 888 First Street NE., Washington, DC 20426, (202) 502-6311, Edward.Franks@ferc.gov. Kevin Ryan (Legal Information), Office of the General Counsel, Federal Energy Regulatory Commission, 888 First Street NE., Washington, DC 20426, (202) 502-6840, Kevin.Ryan@ferc.gov. Matthew Vlissides (Legal Information), Office of the General Counsel, Federal Energy Regulatory Commission, 888 First Street NE., Washington, DC 20426, (202) 502-8408, Matthew.Vlissides@ferc.gov.