2017-23287: Revised Critical Infrastructure Protection Reliability Standard CIP-003-7-Cyber Security-Security Management Controls
Public comment closed .
Get alerted when the next rule lands
New rules open for comment on their own schedule. Pick how you want to hear about them — we email you when one appears.
Publishing to members? Embed a live rule tracker on your own site — the proposed rules in your area and the comment deadlines closing on them, updating themselves. Free, one line of HTML.
Create a free account & build one →Summary
The Federal Energy Regulatory Commission (Commission) proposes to approve Critical Infrastructure Protection (CIP) Reliability Standard CIP-003-7 (Cyber Security--Security Management Controls), submitted by the North American Electric Reliability Corporation (NERC). Proposed Reliability Standard CIP-003-7 improves upon the current Commission-approved CIP Reliability Standards by clarifying the obligations pertaining to electronic access control for low impact BES Cyber Systems; adopting mandatory security controls for transient electronic devices (e.g., thumb drives, laptop computers, and other portable devices frequently connected to and disconnected from systems) used at low impact BES Cyber Systems; and requiring responsible entities to have a policy for declaring and responding to CIP Exceptional Circumstances related to low impact BES Cyber Systems. In addition, the Commission proposes to direct NERC to develop certain modifications to the NERC Reliability Standards to provide clear, objective criteria for electronic access controls for low impact BES Cyber Systems; and address the need to mitigate the risk of malicious code that could result from third-party transient electronic devices.
The agency’s own summary, as published.
What this changes
Amends 1 part of the Code of Federal Regulations — the standing rules this notice rewrites.
Don't miss the comment window
One Click Politics alerts you on every deadline, hearing, and rule change.
See all rules with comments due soon →